ISO 27005 Certified Risk Manager (MEHARI)

This intensive five-day course enables participants to develop the skills to master the basic elements of risk management for all relevant information security assets using the ISO/IEC 27005:2011 standard as a reference framework and the MEHARI method. Through practical exercises and case studies, participants will acquire the necessary skills and competencies to conduct an optimal assessment of information security risk and manage risk over time while being familiar with their lifecycle.

This training fits perfectly within the framework of a process for implementing the ISO/IEC 27001:2005 standard.

Objectives

- Understand the concepts, approaches, methods, and techniques for effective risk management
- Develop the necessary skills to conduct a risk analysis using the MEHARI method
- Master the steps to conduct a risk analysis using the MEHARI method
- Acquire the skills to implement, maintain, and manage a continuous risk management program

Training program

General information

• Code: ISO 27005 + MEHARI

• Duration: 5 days

• Schedule: 9:00 AM – 4:00 PM

• Location: Tunis

• Exam: Included

Target audience

• Risk managers

• Information security or compliance officers within an organization

• Project managers or consultants wishing to master information security system audits

• Members of an information security team

• Information technology consultants

• Personnel implementing the ISO 27001 standard or seeking to comply with it or participating in a risk management program based on the MEHARI method

Prerequisites

• A basic knowledge of information system security

Resources

• Course materials in French

• Course taught in French

• Copy of the ISO 27001 standard