Information Security Management SystemsMövzu planı

This topic introduces the fundamental concepts, objectives, and principles of information security. It develops foundational knowledge of the principles of confidentiality, integrity, and availability, as well as information assets, threats, vulnerabilities, and security controls.

This topic examines international standards and regulatory requirements applicable to information security. It explores the establishment of standards-compliant security processes within organizations, compliance assessment, and the principles of auditing.

This topic covers the objectives, structure, and implementation principles of an Information Security Management System (ISMS). It examines the development of security policies, process management, risk assessment, and approaches to continuous improvement.

This topic explores the identification, classification, inventory, and lifecycle management of information assets. It also examines the development and implementation of security policies and their alignment with organizational objectives.

This topic examines methods for identifying, analyzing, assessing, and managing information security risks. It covers the identification of threats and vulnerabilities, risk prioritization, and the selection of appropriate risk mitigation measures.

This topic examines the role of human and organizational factors in ensuring information security. It addresses employee security awareness, the definition of roles and responsibilities, access rights management, and the mitigation of risks arising from human factors.

This topic covers the principles of protecting information systems, equipment, and information resources against physical threats. It examines physical access control, security zones, surveillance systems, equipment protection, and measures for safeguarding against emergencies.

This topic explores methods for protecting information systems and technological infrastructure against modern cyber threats. It covers network security, authentication, encryption, firewalls, malware protection, and secure system configuration.

This topic examines the processes involved in detecting, registering, analyzing, responding to, and mitigating information security incidents. It covers the development of incident response plans, the assignment of responsibilities, and post-incident recovery measures

This topic explores the structure, functions, and operational principles of a Security Operations Center (SOC). It examines security event monitoring, threat detection, log analysis, incident response, and the operational management of security processes.

This topic examines administrative, physical, and technical controls used to reduce information security risks. It covers the selection and implementation of access controls, monitoring mechanisms, encryption, backup procedures, and other security controls.

This topic explores methods for measuring and evaluating the effectiveness of information security management processes. It examines security metrics, auditing, monitoring, compliance assessment, and the continuous improvement of security processes.

This topic covers the principles of integrating security requirements into the software development process. It examines secure programming, the definition of security requirements, vulnerability management, code review, and the secure software development lifecycle.

This topic examines the planning, execution, and management of security testing for software and information systems. It explores the integration of security controls into CI/CD pipelines within the DevSecOps approach, automated testing, vulnerability detection, and continuous security monitoring.

This topic examines the principles of planning, organizing, and managing the implementation of information security projects. It covers defining project objectives, resource and schedule planning, risk management, communication with stakeholders, and evaluating project outcomes.