ISEB - Certificate Information Security Management Principles

The objective of the Course is to affirm that the holder has a good basic knowledge of security management principles and in particular

• Key fundamental concepts underpinning information security management in particular:confidentiality, integrity, availability, risk, threats, vulnerabilities and security controls.
• Business environments within which information security needs to be managed e.g.
• implications of electronic commerce, outsourcing, organisational issues.
• Technical aspects of significant threats, vulnerabilities and security controls e.g. malicious software, the internet, security products, cryptography.
• Categorisation, operation and effectiveness of security controls.
• Current national and international legislation and regulations that impact upon information security management in the UK.
• Current national and international standards, frameworks and organisations that facilitate the management of information security.