ISO/IEC 27005 Risk Manager

Audience Profile

This training course is intended for:

• Managers or consultants involved in or responsible for information security in an organization
• Individuals responsible for managing information security risks  
• Members of information security teams, IT professionals, and privacy officers
• Individuals responsible for maintaining conformity with the information security requirements of ISO/IEC 27001 in an organization
• Project managers, consultants, or expert advisers seeking to master the management of information security risks

Q: What is the intent of ISO 27005?

A: ISO 27005 is used to define risk management for information security risk management, with a particular emphasis on conforming to the standards of an Information Security Management System (ISMS), as required by ISO/IEC 27001.

Q: When was ISO 27005 made?

A: The ISO 27005 course is the international standard that defines how to execute an information security risk assessment in line with the requirements of ISO 27001.

Q: Who are the targeted audience of this course?

A: The target audience of this course is Information Security risk managers, Information Security team members, IT consultants, IT professionals, Information Security officers, Privacy officers, Individuals responsible for Information Security, compliance, and risk within an organization, and people who are looking to implement ISO/IEC 27001, seeking to comply with ISO/IEC 27001 or involved in a risk management program

Q: What are the steps in the risk management process?

A: The essential steps of the Risk Management Process are:

• Identify the risk. 
• Assess the risk. 
• Treat the risk. 
• Monitor and Report on the risk.