|
|
 |
 |
Dates of the coming sessions:
 23-27 January 2012 (Paris)
5-9 March 2012 (Paris)
2-6 April 2012 (Paris)
11-15 June 2012 (Paris)
18-22 June 2012 (Toulouse)
17-21 September 2012 (Paris)
24-28 September 2012 (Luxembourg)
15-19 October 2012 (Paris)
26-30 November 2012 (Paris)
Dates subject to modification without prior notice.
The sessions will only take place if the number of registered attendants is high enough.
|
|
|
|   |
Goals
International recognition
The training by HSC and the examination by LSTI are internationally recognized, on the same level as the other trainings and examinations available on the market.
For more information, see the page Certification by LSTI
.
Duration
5 days.
Instructor(s)
This training is given by two to three consultants among the following:
- Julien Levrard (Julien.Levrard@hsc.fr)
- ISO27001 Lead Auditor certified by KPMG Audit Plc and LSTI
- ISO27001 Lead Implementer certified by LSTI
- ISO27005 Risk Manager by LSTI
- ITIL V3 certified
- CISA certified
- QSA certified by PCI Council
- Alexandre Fernandez-Toro
- BS7799 Lead Auditor certified by BSI
- ISO27001 Lead Auditor certified by LSTI
- ISO27001 Lead Implementer certified by LSTI
- ISO27005 Risk Manager certified by LSTI
- CISSP, ITIL foundations et ITIL practitioner certified
- ISMS auditor for several certification organisations
- Former member of the "club EBIOS"
- Member of the "Club 27001"
- Registered as ISMS Provisional Auditor by the IRCA under the number 01186952 (International Register of Certificated Auditor)
- Hervé Schauer (Herve.Schauer@hsc.fr)
- ISO27001 Lead Auditor certified by LSTI
- ISO27001 Lead Implementer certified by LSTI
- ISO27005 Risk Manager certified by LSTI
- ProCSSI certified
- CISSP, ITIL certified
- Registered as ISMS Provisional Auditor by RABQSA under the number 105219
- Participating to the normalization in security at AFNOR since 1990 and at CN27 since its creation in 1993
- Member of the ISO 27001 group of the Clusif, working on measurements and metrics (ISO 27004)
- Former member of the Club EBIOS
- Host of Club 27001
- Quentin Gaumer (Quentin.Gaumer@hsc.fr)
- ISO27001 Lead Auditor certified by LSTI
- ISO27001 Lead Implementer certified by LSTI
- ISO27005 Risk Manager certified by LSTI
- Benjamin Arnault (Benjamin.Arnault@hsc.fr)
- ISO27001 Lead Auditor certified by LSTI
- ISO27001 Lead Implementer certified by LSTI
- ISO27005 Risk Manager by LSTI
- CISSP, GIAC GCFA and GIAC GCWN certified
- ITIL Fundation certified
- ISO20000-1 Lead Auditor certified by LSTI
- QSA certified by PCI Council
- Member of "Club 27001"
 |
Pre-requisite for attendants
Teaching method
Lecture, with numerous examples of practical applications based on the
experience feedback of HSC and our customers, given by ISO 27001 Lead Auditor
consultants.
Related courses
ISO 27001 Lead Auditor
Material
The course is delivered in french and in french only.
Course material include slides in French (about 330), exercices in French (about 30 pages),
exercices corrections in french (about 10 pages), and all others documents in french
or english necessary for the course.
Agenda
- Welcome of participants
- General description of the course
- Introduction to management systems
- ISO 27001 standard presentation
- ISMS notion (Information Security Management System)
- PDCA (Plan-Do-Check-Act) model
- Records
- Assets inventory
- Risk assessment
- Risk treatment
- ISO 27001 certification process
- ISO 27002 (formerly ISO 17799) standard presentation
- Categories of controls
- Organizational controls
- Technical controls
- ISO 27005 risk management
- Introduction to ISO 27005 standard
- Vocabulary : risk, threat, vulnerability
- Risk management process
- Context establishment
- Risk assessment
- Risk identification
- Risk estimation
- Risk evaluation
- Risk treatment
- Risk acceptance
- Risk communication
- Risk monitoring and review
- ISO 27001 implementation
- Project and project manager
- Training and information
- Gap analysis
- Perimeter choice
- Basics
- Risk Assessment
- Documentation
- Procedures explicitly mandatory in ISO 27001
- Procedures implicitly needed
- Controls selection
- Internal audit and actions following
- Communication
- Common mistakes
- Tools
- ISO 27001 Indicators
- Choice of indicators
- ISO 27004 Information Security Measurement Programme
- Conformity vs performance indicators
- Roles and responsabilities
- Identification, measurement, analysis and use of indicators
- Exercises for examination preparation
- Examination
|
Methods of inscription
For registering an HSC course, please contact our training department by phone : +33 141 409 704
or by email at formations@hsc.fr, with first and last name of every student, your postal address and your company VAT number.
Thoses informations enable us to send your the training agreement.
The training agreement must be return agreed with signature and company
stamp with you purchase order, at least 6 days before the course. The
purchase order should precise your billing address and our payment
regulations : net 30 days from our invoice date.
Registration is completed as soon as we received those two documents.
|
