Introduction to ISO 27001 and Information Security Management Systems (ISMS)

Content:

• Overview of ISO 27001 and its relevance to financial institutions.
• Introduction to the concept of Information Security Management Systems (ISMS).
• Key components of ISO 27001: context, leadership, planning, support, operation, performance evaluation, and improvement.
• Importance of risk assessment in the context of information security.
• Establishing the scope of an ISMS and its alignment with business objectives.

The Audit Process and Risk Assessment

Content:

• Introduction to the auditing process within the context of ISO 27001.
• Phases of an audit: planning, fieldwork, reporting, and follow-up.
• Risk assessment methodology and its role in auditing financial institutions.
• Identifying information security risks, threats, and vulnerabilities in financial institutions.
• Understanding the controls that mitigate these risks.
• Key audit tools and techniques used in information security audits.

Auditing Information Security Controls and Compliance

Content:

• Review of Annex A controls in ISO 27001: Organizational, Human Resource, Physical, Technological, and Legal controls.
• Auditing technical and procedural controls: firewalls, encryption, access controls, etc.
• How to evaluate the effectiveness of implemented controls.
• Legal and regulatory requirements for financial institutions in relation to information security.
• Ensuring compliance with data protection laws and financial regulations.

Reporting, Follow-up, and Continuous Improvement

Content:

• Developing audit findings and preparing audit reports.
• Writing clear, actionable recommendations for improvements in information security practices.
• Follow-up process: tracking the implementation of audit recommendations.
• Importance of continuous improvement in ISMS.
• Conducting internal audits and preparing for external audits.
• Lessons learned and best practices for ongoing compliance.

DATE:
1ST BATCH: 22nd – 25th Apr, 2025
2ND BATCH: 4th – 7th Nov, 2025