تفاصيل البرنامج
نوع البرنامج التدريبى
اسم البرنامج التدريبى
رقم البرنامج التدريبى
عدد الأيام
عدد ساعات البرنامج
تاريخ بدء البرنامج 11 أغسطس 2019
مكان الانعقاد القاهره - مصر
المهندسين - 26 ش عدن من ش شهاب
مستوى البرنامج
لغة البرنامج
مزايا المشاركة
  • اختبار البورد الكندى للتقييم المهني PECB
  • شهادة PECB معتمدة من البورد الكندى للتقييم المهني الاحترافي
  • الإستقبال والمغادره من وإلى المطار ( للمشاركين من خارج مصر )
  • وجبه خفيفه مع المشروبات الساخنه والبارده يوميا
  • تقييم نهائى
  • تقييم عام للبرنامج التدريبي
  • تقييم يومى للمشاركين
  • الحصول على المادة العلمية (Hard copy)
وصف البرنامج

In this five-day intensive course, the participants develop the competence to master the basic risk management elements related to all assets of relevance for information security using the ISO/IEC 27005:2011 standard as a reference framework and MEHARI method. MEHARI method was developed by “Club de la Sécurité des Systèmes d’Information Français” (CLUSIF) in France. Based on practical exercises and case studies, participants acquire the necessary knowledge and skills needed to perform an optimal information security risk assessment and manage risks in time by being familiar with their life cycle. This training fits perfectly in the framework of an ISO/IEC 27001:2005 standard implementation process.

تفاصيل البرنامج

Day 1 : Introduction, risk management program according to ISO/IEC 27005

Concepts and definitions related to risk management

Risk management standards, frameworks and methodologies

Implementation of information security risk management program

Understanding an organization and its context


DAY 2 : Risk identification and assessment, risk evaluation, treatment, acceptance, communication and surveillance according to ISO/IEC 27005

Risk identification

Risk analysis and risk evaluation

Risk assessment with a quantitative method

Risk treatment

Risk acceptance and residual risk management

Information Security Risk Communication and Consultation

Risk monitoring and review


DAY 3 : Exam and start of risk assessment with MEHARI

Certified ISO/IEC 27005 Risk Manager Exam (2 hours)

MEHARI Presentation

Assessment and classification issues

Overview of the process

The value chain for failures

Classification of resources


DAY 4 : Assessment of vulnerabilities and risk, according to MEHARI

Assessment of the vulnerabilities

Qualities of a security service

Measuring the quality of a security service

Evaluation process

Risk assessment


DAY 5 : Security planning according to MEHARI and Exam

Security plans and procedures

Tools to support the implementation of MEHARI

“MEHARI advanced” exam (2 hours)

المستهدفون

Risk managers -

Persons responsible for information security or conformity within an organization -

Members of information security team -

IT consultants -

Staff implementing or seeking to comply with ISO/IEC 27001 and involved in a risk -

management program based upon MEHARI method

الاهداف العامة

To understand the concepts, approaches, methods and techniques allowing an- 

effective management of risk according to ISO/IEC 27005

To interpret the requirements of ISO/IEC 27001 on information security risk -

management

To develop the necessary skills to conduct a risk assessment with MEHARI method -

To master the steps to conduct a risk assessment with MEHARI method -

To understand the relationship between the information security risk management -

security controls and the compliance with the requirements of different stakeholders 

of an organization

To acquire the competence to implement, maintain and manage an ongoing -

information security risk management program according to ISO/IEC 27005

To acquire the competence to effectively advise organizations on the best -

practices in information security risk management

الاهداف التفصيلية
جهة اعتماد الشهادات
البرامج المتعلقة