|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/isoiec-27701-privacy-information-management-system/
课程评论：没有评论
课程名称：ISO/IEC 27701:2019 隐私信息管理系统 课程概述：本课程详细介绍了ISO/IEC 27701:2019的要求，该标准是国际标准化组织（ISO）发布的最新标准，旨在为处理个人可识别信息（PII）的组织定义控制措施。ISO/IEC 27701是ISO/IEC 27001（信息安全管理系统标准）的扩展，适用于任何规模和位置的组织，无论其作为PII控制者、处理者或两者兼具。保护隐私是一个重要的商业关切，数据泄露的平均成本高达360万美元，法律义务日益严格。随着全球的互联互通，各国政府正在推出各种隐私法规，例如欧洲联盟的通用数据保护条例（GDPR）。ISO/IEC 27701帮助企业满足这些要求，无论其所在的法域。 课程内容包括五个部分： 1. 介绍部分：讨论一般概念、定义、隐私原则、隐私参与者、国际隐私标准以及ISO/IEC 27701:2019与GDPR的关系。 2. 管理体系的一般要求：包括组织背景、领导力、规划、支持、运营、绩效评估和改进。 3. 信息安全控制（共114项）：重点在ISO/IEC 27001中的信息安全控制，并添加隐私方面的补充内容，涵盖信息安全和隐私政策、组织信息安全和隐私、人员安全、资产管理、访问控制、加密、物理与环境安全、运营安全、通信安全、系统采购、开发和维护、供应商关系、事件管理、业务连续性的信息安全和隐私方面以及合规性等。 4. 作为PII控制者的组织的要求和指导。 5. 作为PII处理者的组织的要求和指导。 通过本课程，您将获得了解隐私信息管理系统所需的所有知识。您可以利用这些信息： - 担任隐私顾问； - 参与管理体系审核； - 增强组织的信息安全管理系统，以满足ISO/IEC 27701的附加要求； - 在公司实施隐私信息管理系统； - 或仅仅更好地理解ISO处理个人可识别信息的方式。 您将从本课程中获得简明的信息，随时可以重温，因为Coursera提供终身访问，完成培训后将获得结业证书，这将有助于证明您的能力。
This course details the requirements of ISO/IEC 27701:2019, the latest standard published by ISO (The International Organization for Standardization) to define controls for an organization that processes a Personally Identifiable Information (PII).ISO/IEC 27701 is an extension for privacy of ISO/IEC 27001 (the Information Security Management System standard) and can be used by any organization regardless of its location and size, regardless if it acts as PII (Personally Identifiable Information) controller, PII processor or both.Protecting privacy is a significant business concern. According to IBM the average cost of a data breach is USD 3.6 million, and legal obligations are increasingly stringent. As we get more connected, governments all over the world are introducing various privacy regulations, such as the European Union's General Data Protection Regulation (GDPR). ISO/IEC 27701 helps businesses meet such requirements, whatever jurisdiction they work inMajor companies and organizations have participated in the development of this standard. For example Microsoft was an active member of the committee that developed ISO/IEC 27701.The course includes 5 sections:- the first one is the Introductory section where we discuss about general aspects, definitions, privacy principles, privacy actors, international standards for privacy or the relationship of ISO/IEC 27701:2019 with the GDPR;- the second section is about the general management system requirements including Context of the organization, Leadership, Planning, Support, Operation, Performance evaluation and Improvement. - the third section discusses the information security controls (114) from ISO/IEC 27001 with privacy additions, where they are present. The following sets of controls are included: Information security and privacy policies, Organization of information security and privacy, Human resources security, Asset management, Access control, Cryptography, Physical and environmental security, Operations security, Communications security, Systems acquisition, development and maintenance, Supplier relationships, Incident management, Information security and privacy aspects of business continuity and Compliance;- the fourth section includes requirements and guidelines for organizations that act as PII controllers and- section five is about requirements and guidelines for organizations that act as PII processors.From this course you will get all the knowledge you need to understand what a Privacy Information Management System is. You can use this information to:- work as a privacy consultant;- participate in management system audits;- enhance an organization's information security management system to meet the additional requirements of ISO/IEC 27701;- implement a Privacy Information Management System in a company;.or you can just have a better understanding of what is ISO approach on processing personally identifiable information. You will get from this course concise information that you can re-visit at any time since Udemy offers life-time access and as you complete the training you will obtain a certificate for completion, that can be useful to demonstrate your competence.
