Don't Wait for a Disaster Before You Learn About Information Security

If you're a controller, IT Manager, or anyone with oversight of Information Technology, you need a proactive strategy to ensure your systems and precious business data are secure.

This webcast will provide you with an understanding of information security threats, common vulnerabilities, and the risks of deploying and managing IT assets. 

You will gain an essential background on information security concepts and risks, as well a detailed understanding of the laws, frameworks, and standards that exist to govern information security.

Get Started Right Away with a Clear and Easy Review Framework

You'll also learn about 12 critical information security control practices and how to implement them in the form of a do-it-yourself information security review. 

This practical framework can work for organizations of any size and is based on ISO standards. You'll get essential techniques, review checklists, and extra resources to help you start right away.

With your review program in place, you can measure your organization's policies against rigorous industry best practices, helping you assess risks, protect your systems, and ensure the continuity of your business operations.

Five Questions to Ask Yourself About Information Security 

Are your confidential documents and private client files kept as secure as possible from prying digital eyes?

Are you taking steps to ensure the safety of your vital business data in the event of system failure?

Could your business recover from an IT disaster?

If you are responsible for IT at your organization, can you demonstrate to others that you have taken all necessary steps to ensure maximum security?

Does your organization's IT policy meet industry best practices?

By following the clear steps given in this webcast, you'll be able to answer "yes" to all of the above and rest easy knowing you have an information security program based on recognized ISO standards.

This webcast will teach you

• why you should perform an information security review
• the various information security standards
• how the information security standards help management
• how the standards fit in and how to use them
• what should be in your information security review plan
• the most important information security review areas

Presentation outline

• Introduction to Information Security Review
  
• Control Environment
• Information security concepts
• Information security risks
• Understanding the Frameworks and Standards
• COBIT Framework
• ITIL
• ISO 27001 and ISO 27002
• Starting Out: Doing a Gap Analysis using ISO 27002
  
• ISO 27002 Control Practices
• Risk assessment and treatment
• Security policy
• Security organization
• Asset management
• Human Resources security
• Physical and environmental security
• Communications and operations management
• Access control
• Information systems acquisition, development, and maintenance
• Information security incident management
• Business continuity management
• Compliance
• Review Tools and Techniques
• References
• Checklists

System requirements

Internet Explorer 6 or later is required to view and hear the webcast. In order to access this webcast presentation, please test your system on the computer you will be using for the webcast. Be sure to click on "OK - Play Test" under Status in order to see and hear the video playing.
 
                   A screen shot of the "test your system" tool

If you require further information, go to our Help page or send an e-mail to PD Net Comments.  

Peter Davis, CISA, CISSP, CSP, CMA, CNA, CMC, CCNA, CWNA, CISM Accredited COBIT/ITIL Trainer, ISSPCS, PMP, SSGB, and CGEIT, is the Principal of Peter Davis + Associates, a management consulting firm specializing in the security, audit, and control of information. Prior to founding PDA, Mr. Davis' private sector experience included stints with two large Canadian banks and a manufacturing company. He was formerly a principal in the Information Systems Audit practice of Ernst & Young. In the public sector, Mr. Davis was Director of Information Systems Audit in the Office of the Provincial Auditor (Ontario). 

A 30-year information systems audit and security veteran, Mr. Davis' career includes positions as security administrator, security planner, consultant, and information systems auditor.

Mr. Davis also is the past President and founder of the Toronto ISSA chapter, past Recording Secretary of the ISSA’s International Board, and past Computer Security Institute Advisory Committee member. In addition, he was a member of the international committee formed to develop Generally Accepted System Security Principles (GSSP). Mr. Davis has written or co-written 12 books including Lean Six Sigma Secrets for the CIO, Wireless Networking for Dummies, and Hacking Wireless Networks for Dummies. Peter is listed in the International Who's Who of Professionals. He is a past Editor of EDPACS, a monthly publication for security and audit professionals.