This ISMP training is a continuation of the ISFS training and is based on ISO/IEC 27001 and 27002 with a detour to the risk model of ISO 27005. It addresses the management aspects that need to be regulated in the field of security from the perspective of the organization, the customer, and suppliers. It gives substance to this by deepening risk management aspects and ensuring through measures (controls). The training is particularly suitable for anyone who needs to understand the governance aspects of security and know how to demonstrate that compliance with applicable laws and regulations is adequately met.

You will learn how to classify information based on business value and how to establish an effective information security management system. Additionally, you will gain insight into assessing suppliers and ensuring security within outsourced processes. The training extensively covers identifying, analyzing, and managing risks, including developing substantiated business cases and reports. You will learn how to select appropriate control measures based on the BIV principles and the various phases within the incident cycle.

You will also develop skills in drafting policies, implementing incident management, and increasing security awareness within the organization. Finally, you will gain insight into security architectures, IT infrastructures, and physical and human-oriented measures, so you can approach information security integrally and apply it effectively in practice.