In the written course Information Security, you will learn to shape the form and content of information security within your organization. The course provides concrete tools for drafting an information security policy at strategic and tactical levels and the actual measures to be taken at the operational level. Since information security is often a legal requirement, the legal and de facto standards are extensively covered.

Who is the Information Security training suitable for?

This written training is especially suitable when you do not have the opportunity or time to attend a classroom training but still need solid, up-to-date knowledge in the field of information security.

Knowledge of information security is important for every official who is (partly) responsible for customer or business-critical information or needs to advise on it.

Duration of training

Nine lessons, received weekly or bi-weekly in writing

General content

Information Security – the current state of affairs

• Risk management and information security
• Development of IT: impact on security measures
• Case studies
• Information security: change management
• The management cycle for information security

Information Security – policy and organization

• Security policy
• The security organization
• The maturity model for information security

Information Risk Analysis

• Backgrounds of risk analyses
• Different types of risk analyses
• Risk analyses: Recommendations

ISO 27001 framework for information security

• Information security according to ISO 27001
• The Code for information security
• Measures for information security

Security and IT management

• The Code for information security and IT management
• ITIL security management: security and management
• ITIL and information security
• Service support set
• Service delivery set and information security
• Security management process
• ITIL and security, together a managed process

Information Security – certification

• Certification of information security: trust for yourself, trust for your partners
• In search of trust
• Certification based on ISO 27001
• Other certification terms: product certification

Technical security measures

• A framework for technical measures
• Design criteria
• Generally applicable techniques
• Technical measures in the layered model
• Evaluation criteria

IT auditing and information security

• The position and background of auditing
• The playing field and the players
• The tasks and methods of the IT auditor
• Preparation for an IT audit on information security
• Developments

Security Awareness

• Information security: success or failure?
• The 4 B's of behavior change
• Structured communication approach
• Communication tools
• Conclusions

On a date of your choice, you will receive the first lesson of the written course 'Information Security'. After receiving your registration, we will contact you and you can indicate how you would like to receive the training further. You can choose between an interval (weekly/biweekly) or receiving the entire course at once.

Each lesson takes approximately four hours of self-study. Our advice is to follow one lesson per week.