en
fr
Management Training

Information Security Risk Management (ISO/IEC 27005) Professional

TRECCERT ISO/IEC 27005 Professional is an advanced-level course developed to provide trainees with a solid knowledge of the ISO/IEC 27005 guidelines and controls. The training course provides an in- depth explanation of guidelines and controls mandated to establish, implement, manage, improve and assess an Information Security Risk Management (ISRM).

Who should attend this course?

1. Information Security Risk Management

  • Information Security Background
    Risk Management Background
    Information Security Risk
    Information Security Risk Management Process
    based on ISO 27005 Standard
    Statement of Applicability and Risk Management
    Risk Heat Maps

2. Establishing the Context of the Information

  • Security Risk Management Process
    Context Establishment
    Information Security Risk Management
    Process Basic Criteria
    Information Security Risk Management
    Scope and Boundaries
    Defining the Organization’s Structure

3. Information Security Risk Assessment

  • Information Security Risk Assessment Approaches
    Identification of Information Security Risks
    Information Security Risk Analysis
    Evaluation of Information Security Risks

4. Information Security Risk Treatment

  • Risk Treatment Options and Techniques for
    Selecting such Options
    Risk Treatment Plan Development and Residual
    Risk Evaluation
    Acceptance of Information Security Risks
    Risk Recording and Reporting

5. Risk Communication and Consultation

  • Overview of Risk Communication and Consultation
    Risk Communication and Consultation Phases and Plan
    Risk Communication and Consultation Techniques

6. Risk Monitoring and Review

  • Overview of the Risk Monitoring and Review Process
    Monitoring, Reviewing and Improving the Information
    Security Risk Management Process
Prerequisites

The ISO/IEC 27005 Professional training course is developed
for professionals seeking to expand their professional skills
on the assessment and management of an information
security risk management process, for example:

  • Information Security Risk Manager, Team Leader or
    Technician
  • Business Owner, COO, CIO, CISO
  • Risk Analyst, Model Risk Specialist, Risk Manager

LEARNING OBJECTIVES

  • Know and understand the purpose of an information
    security risk management process, including basic
    concepts, principles and other risk management
    frameworks.
  • Know and understand the whole information security
    risk management process steps and activities.
  • Know, understand and be able to identify, assess and
    treat the information security risks and perform other
    related activities.
  • Know and understand the basic analysis and methods
    used to establish a risk management context, assess
    and manage information security risks and implement
    security controls.
  • Know, understand and be able to support the
    information security risk manager perform risk
    management activities.

Practical information

Duration

3 Days

Languages

EN

Price

€ 2.100 +3% VAT

Location

Classroom Course

Schedule

Guaranteed to run

Sessions in English
03-05/03/2025Book
02-04/06/2025Book
15-17/09/2025Book
24-26/11/2025Book
Sessions in Dutch
Contact us for more infoBook
Sessions in French
Contact us for more infoBook

Share this course on

Book your training

Enter your information to confirm your booking.

    You might also be interested in

    Prerequisite test

    Take the test

    Looking for a tailor made solution?

    Get started with personal training