|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/iso-27001-basics-for-beginners/
课程评论：没有评论
课程名称：信息安全 - ISO 27001 入门 概述：ISO 27001 是全球信息安全标准，如果您希望保护您的资产和信息不受攻击，这个课程非常适合您！ISO 27001 为企业提供了一个高效且全面的保护框架，确保关键业务信息的安全。如果您对该标准了解不多并希望深入了解，该系列简短的视频讲座将帮助您认识 ISO 27001 及其实施所需的内容。 本课程将简要讨论以下主题： - 范围：在 ISO 27001 的背景下，"范围"是什么意思？ - 风险：如何测量和控制对企业的风险。我们将介绍风险分析的基础知识。 - 控制措施：需要实施哪些控制措施以应对识别出的风险？我们讨论强制性和可选性控制措施的含义。 - 文档：ISO 27001 中非常重要的文档是适用性声明，它的内容是什么？ - 其他文档：ISO 27001 还需要哪些其他文档？其中一些是强制的，另一些是可选的。 - 资产：资产分为数字资产和实体资产。如何在 ISO 27001 中记录这些资产？ - 测量：ISO 27001 要求您测量控制措施的有效性，您该如何进行？ - 实施：我们提供在组织中最佳实施该标准的信息，包括所需的步骤。 - 认证：认证并非强制，但如果您选择认证，涉及哪些内容以及最佳的认证方式是什么？ 课程结束时会进行一项简短的测试，完成课程后，您将对全球标准、主要特征与要求以及实施的指南有一个良好的基础理解。
ISO 27001 is the Global Standard for Information Security. If you're interested in protecting your assets and information against attacks, this is for you! ISO 27001 is a framework for efficient and comprehensive protection of what is vitally important to your business. If you know little about the standard, and want to know more, then this series of short video lectures will help you to understand what is ISO 27001 and what is required to implement it.In these short lectures we talk briefly about the following topics:Scope - What do we mean by Scope in the context of ISO 27001?Risk - You need to measure and control the Risks to your business. We talk about the basics of Risk Analysis.Controls - What controls to you need to put in place to address the risks you have identified. What is meant by Controls? We discuss Mandatory and Optional Controls.Documentation - A very important document in ISO 27001 is the Statement of Applicability. What is it and what does it contain?Documentation - What other documentation is required for ISO 27001? Some are mandatory and some optional.Assets - There are two types of Assets, Digital and Physical. How do you record these in ISO 27001?Measurement - ISO 27001 requires you to measure how effective your controls are. How do you do that?Implementation - We provide information on how best to implement the standard in your organization. What steps are required.Certification - It is not compulsory, but should you choose to certify to the standard, what is involved and how best should you do it?At the end of the course is a short test, and after completing the course you should have a good basic understanding of the Global Standard, the main features and requirements, and some guidance on how to implement it.
