ISO/IEC 27001 specifies a management system that is intended to bring information security under management control and gives specific requirements. Organizations that meet the requirements may be certified by an accredited certification body following successful completion of an audit.
 
This course helps practitioners to systematically examine the organization's information security risks, taking account of the threats, vulnerabilities, and impacts; design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment; and adopt an overarching management process to ensure that the information security controls continue to meet the organization's information security needs on an ongoing basis.