TRECCERT ISO/IEC 27001 Lead Implementer ​Certification

Module 1 – Introduction to ISMS

• Fundamentals of Information Security

• Overview of ISMS (Information Security Management System)

• Relevant Standards and Best Practices (e.g., ISO/IEC 27001, ISO/IEC 27002)

Module 2 – Requirements for the ISMS

• Context of the Organization

• Leadership and Commitment of Management

• Planning and Risk Management

• Support (Resources, Competences, Communication)

• Operation and Implementation

• Performance Evaluation

• Improvement and Continuous Development

Module 3 – Organizational and Personnel Controls

• Information Security Policies and Management

• Asset Management and Access Controls

• Supplier Relationships and Incident Management

• Legal Requirements and Compliance

• Personnel Security

Module 4 – Physical and Technological Controls

• Physical Security Measures

• Technical Security Measures

• Network Security

• Application Security

Module 5 – Initiation of the ISMS

• Development of an ISMS Project Charter

• Ensuring Management Support

• Identification of Interested Parties

• Conducting a Gap Analysis

Module 6 – Establishment Phase

• Define the Context of the Organization

• Establish ISMS Scope

• Define Objectives, Processes and Procedures

• Create ISMS Policy

• Define Risk Assessment Approach

• Develop Implementation Plan

• Obtain Management Approval

Module 7 – Implementation and Operation Phase

• Risk Treatment and Implementation of Controls

• Manage Operation of the ISMS

• Resource Management

Module 8 – Monitoring and Evaluation Phase

• Monitor ISMS Performance

• Conduct Internal Audits

• Management Review and Reporting

Module 9 – Maintenance and Improvement

• Implement Improvement Measures

• Corrective and Preventive Actions

• Communication of Actions

• Ensure Continuous Improvement