INFORMATION SECURITY RISK ASSESSMENT FOR ISO27001
FREE WEBINAR
4 JUNE 2008 9am Pacific DT, midday Eastern DT and 5pm BST
Risk assessment is at the critical heart of implementing an information secuirty management system - and the international standard ISO27001 sets out a number of critical steps that must be taken into account when planning and performing the risk assessment.
Join this webinar to learn how to get the same benefits as organizations like the United Nations, the Federal Reserve Banks of New York and San Francisco, Bechtel, EDS, PriceWaterhouseCoopers, Reuters, the World Bank, Unisys and Xerox .
Who is this webinar for?
This free online webinar is designed for business executives, project leaders, IT and information security executives, regulatory compliance professionals and anyone interested in or involved with information security and regulatory compliance, and is led by author and ISO27001 expert Alan Calder, who will introduce you to the fundamentals of effective information security risk assessment in accordance with the requirements of this international standard.
It is a NON-TECHNICAL webinar and deals with the key issues and concepts in terms that make sense to executives.
RISK MANAGEMENT
In the world of SOX, COSO and Basel2, IT risk management has become a hot IT topic over the last few years. As organizations become increasingly dependent on information technology and intellectual capital assets, the key areas of IT risk are usually seen as:
-
IT infrastructure and network security – rising from concerns about hackers, terrorists, cyber-criminals, insiders, outsiders, viruses, and so on
-
Data integrity, confidentiality and privacy – rising from regulatory and market pressure around protecting personal (e.g. data protection legislation), and corporate data (e.g. fair disclosure regulations), as well as financial and operational data (e.g. Sarbanes Oxley)
-
Business continuity – rising from concerns about the capability to continue in business after a natural or man-made disaster
-
IT management – rising from concerns about project failure, poor IT operational performance, inadequate IT infrastructure, etc
Information Risk and ISO 27001
The information security standard, ISO/IEC 27001:2005, is specifically risk-based. In line with NIST SP800-30 and NIST SP800-26, it recommends, in effect, that organizations implement information security controls prioritized by, and in proportion to, the business and information risks they identify. While OCTAVE (Operationally Critical Threat, Asset & Vulnerability Evaluation) is a clear risk assessment methodology, information security risk assessment can also now follow the guidelines contained in BS7799-3:2006.
You can sign up for this webinar today and get its full value without any of the time and other costs of attending an off-site training seminar.
This webinar will run at 9am Pacific DT, midday Eastern DT and 5pm BST
The webinar will last approximately 60 minutes in total.
"Your presentation was excellent!" Craig Cumbow, Dawn Food Products Inc .
