Course Objective

This course provides you with the skills needed to independently implement an information security management system in your organization in accordance with DIN EN ISO 27001 or the BSI Basic Protection Framework

Skills Taught

• Information security objectives and information security in the context of information management
• Interfaces with other management topics; data protection requirements; legal requirements for information security
• Overview of information security standards (ISO 27000 series, BSI standards, IEC 62443 series, certification)
• Requirements for an information security management system in accordance with DIN EN ISO 27001
• Requirements of the BSI Basic Protection Framework Fundamentals of risk management according to ISO 31000
• Fundamentals of Business Continuity Management according to BSI 200-4

Prerequisites for Participation

Regular attendance at the class / course and successful completion of the examination component for Module 132400 IT Security Management, or proof of adequate knowledge

Target Audience

Master’s students in the following degree programmes: integrated management systems, or students in other degree programmes who have taken the above-mentioned module as an elective