Mgmt100: Introduction to Information Security

Description: This two-day workshop will provide attendees with an overview of information security specifically designed for anyone new to the field. Geared to the new IT auditor, Security Manager or anyone thrust into this exciting area, it provides a comprehensive perspective, touching on all aspects of security and providing a sound basis for understanding what is involved in IT Security today.

The course will ensure that you gain an understanding and become conversational in the terminology of the security world. The seminar will focus on both technology and management practices, ensuring that you are aware of the full complement of elements necessary for a good security program.

Audience: This seminar is intended for managers, supervisors and anyone new to the field of Information Security.

Prerequisites: An interest in the field of information security.

Objectives: After completing this seminar, participants will be able to:

· Recognize the importance of security in any business

· Learn to manage a security program with appropriate emphasis

· Understand critical areas that are often ignored

· Describe the threats involved in inaccurate or inappropriate security decisions

· Understand the tools and techniques available to implement security

· Know accepted standards like ISO 27002 and CobiT

· Ensure an adequate understanding of the technical elements involved in order to direct and manage staff

Course Outline:

· Policies, Standards and Procedures

· Security Architecture/Model/Strategy

· Training and Security Awareness

· The Security Organization

· Understanding Cobit, ISO27002 and others

· Understanding and Using effective Risk Management

· Ethics and Investigations

· Physical Security

· Disaster Recovery and Business Continuity Planning

· Security Monitoring and Reports

· Network Security

· Access Controls and Operating Systems

· Database Security Controls

· Encryption

· Network Penetration, issues and controls

Lewis’ seminar will draw upon his book including Computer Security for Dummies and his almost 30 years of experience in the areas of information security in both industry and consulting as well as his expertise in leading seminars around the world for over 20 years.