90661
APMG ISO/IEC 27001 Full (Foundation + Practitioner) 1 year with exam

APMG ISO/IEC 27001 Foundation objectives:

• ISO/IEC 27001 scope, purpose and how the standard can be used
• ISO/IEC 27001 keywords and its definitions
• The requirements to attain ISO/IEC 27001 certification and the need for perpetual improvement
• Procedures, their general objectives and high level requirements
• Applicability and scope definition requirements
• Use of controls to mitigate IS risks
• Internal audits and external certification purposes, their operation and terminology
• The relationship between best practices, ISO/IEC 27001, ISO 9001 and ISO/IEC 20000

APMG ISO/IEC 27001 Practitioner objectives:

• Apply the principles of Information Security Management System policy and its information security scope, objectives, and processes within an organizational context
• Apply the principles of risk management including risk identification, analysis and evaluation and propose appropriate treatments and controls to reduce information security risk, support business objectives and improve information security
• Analyse and evaluate deployed risk treatments and controls to assess their effectiveness and opportunities for continual improvement
• Analyse and evaluate the effectiveness of the ISMS through the use of internal audit and management review to continually improve the suitability, adequacy and effectiveness of the Information Security Management System
• Understand, create, apply and evaluate the suitability, adequacy and effectiveness of documented information and records required by ISO/IEC 27001
• Identify and apply appropriate corrective actions to maintain Information Security Management System conformity with ISO/IEC 27001

• Internal managers and employees charged with the realization, working and maintenance of an Information Security Management System
• Advisors working to support organizations to realize, work and maintain an Information Security Management System
• Internal auditors, required to have an actual knowledge of ISO/IEC 27001 standard

APMG ISO/IEC 27001 Foundation contents:

• Introduction, background and terminology;
• Key publications that compose the family of ISO/IEC 27001 standard
• Leadership and support of an Information Security Management System
• Planning and managing of an Information Security Management System
• Goals of control and controls for an Information Security Management System
• Acquiring ISO/IEC 27001 qualification

APMG ISO/IEC 27001 Practitioner contents:

• Introduction, background and terminology
• Design an Information Security Management System
• Planning and working an Information Security Management System
• The goal of controls and the security controls for Information Security

To be able to take the exam, it's required to have read and accepted the terms and conditions of the examination institute APMG. The acceptance of such terms and conditions will have to be confirmed when taking the exam.

In order to access ISO/IEC 27001 Auditor exam, it is recommended (not mandatory) that candidates pass ISO/IEC 27001 Foundation certification exam.