Training Course in Information Security Management according to BS7799 Standard
1Summary
Take away banking security systems and anyone could walk into an account, change its records, and disappear with the funds. That single example captures why information security is not optional: it is the layer standing between a company's data and anyone who should never have touched it.
As storage and exchange methods evolved, protecting data moving across networks and between websites became a core operational concern rather than an afterthought. Information security is the applied science of providing adequate protection for information against the internal and external risks that threaten it, and of preventing its transfer to unqualified persons.
One of the earliest and still most effective protections is identification: recognition systems that confirm who a user is before granting access, ensuring only authorized individuals can reach a system. The internationally recognized BS7799 standard formalizes this discipline into a structured management approach.
The Arab British Fellowship Training Academy designed this course for anyone seeking to build real, applicable expertise in maintaining information confidentiality according to the BS7799 standard.
2Objectives and target group
Who Should Attend?
- Directors and owners of companies, and heads of information and information-security departments.
- Technology development experts and network protection specialists.
- Employees working in organizations that rely on software systems.
- All employees in technical and media departments.
Knowledge and Benefits:
After completing the program, participants will be able to:
- Apply software, applications, and database protection systems.
- Manage confidential information according to BS7799 principles.
- Design and apply access protection and identification systems.
- Recognize internal and external risks threatening company information and how to mitigate them.
3Course Content
Module 1: Why Information Security Cannot Be an Afterthought
- Real-world consequences of weak information security, illustrated through banking systems.
- Defining information security as the science of protecting data from internal and external risk.
- How the discipline evolved alongside technology and data exchange methods.
Module 2: Identification and Access Protection Systems
- Recognition and identification systems for confirming authorized users.
- Methods of managing access protection systems in practice.
- Smart cards and their role in strengthening information security.
Module 3: Managing Confidentiality under BS7799
- Strategies for managing confidential information security within organizations.
- Keeping information confidentiality and integrity intact across systems.
- Information security management (ISM): its definition and organizational importance.
Module 4: Protecting Software, Applications, and Data
- Software and application protection systems used in modern companies.
- Database protection systems and safeguarding stored information.
- Preventing unauthorized transfer of information to unqualified persons.