The ISO/IEC 27000-series standards promote good practices for information risk and security management, in particular a coherent suite of processes to identify, evaluate and treat the organization’s information risks systematically.
The standards are designed to apply to all sorts of organization, meaning that they are generic and need to be interpreted and applied appropriately in the specific business context of any single organization. Helping people understand and make the most of the ISO27k standards is the main purpose of this awareness and training module.
Raise awareness of the ISO/IEC 27000-series information security standards.
~76 Mb zip file