ISO 27034 Lead Implementer - Four Page Brochure

470 views
304 views

Published on

MASTERING THE IMPLEMENTATION OF MANAGEMENT IN IT - SECURITY TECHNIQUES
– APPLICATION SECURITY BASED ON ISO 27034

Published in: Education, Technology, Business
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
470
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
3
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

ISO 27034 Lead Implementer - Four Page Brochure

  1. 1. CERTIFIED ISO 27034 LEAD IMPLEMENTER MASTERING THE IMPLEMENTATION OF MANAGEMENT IN IT - SECURITY TECHNIQUES – APPLICATION SECURITY BASED ON ISO 27034 SUMMARY This five-day intensive course enables the participants to develop, acquire, implement and use trustworthy applications, at an acceptable (or tolerable) security cost. More specifically, these components, processes and frameworks provide verifiable evidence that applications have reached and maintained a targeted level of trust as specified in ISO/IEC 27034. The purpose of ISO/IEC 27034 Lead Implementer is to assist organizations in integrating security seamlessly throughout the life cycle of their applications. Application Security applies to the original software of an application and to its contributing factors that impact its security, such as data, technology, application development life cycle processes, supporting processes and actors, and it applies to all sizes and all types of organizations (e.g. commercial enterprises, government agencies, non-profit organizations) exposed to risks associated with applications. COURSE AGENDA DURATION: 5 DAYS DAY 1 Introduction to IT - Security techniques – Application Security overview and concepts as required by ISO 27034 ▶▶ ntroduction to Security techniques – Application I Security and the process approach ▶▶ resentation of the standards ISO 27034-1, ISO P 27034-2, ISO 27034-3, ISO 27034-4, ISO 27034-5, ISO 27034-6 and regulatory framework ▶▶ undamental principles of Security techniques – F Application Security ▶▶ verview and concepts of Application Security O ▶▶ efinitions, concepts, principles and processes D involved in Application Security DAY 3 Protocols and application security control data structure based on ISO 27034 ▶▶ pplication security control data structure A requirements, descriptions, graphical representation ▶▶ ML schema, based on ISO/TS 15000: Electronic X business extensible Markup Language ebXML ▶▶ acilitation the implementation of the ISO/IEC 27034 F ▶▶ ommunication and exchange of ASCs C ▶▶ stablishment of libraries of Application Security unctions E ▶▶ Provisioning and operating the application DAY 5 DAY 2 Implementation of IT - Security Techniques – Application Security based on ISO 27034 ▶▶ rganization normative framework O ▶▶ Definition of the scope in Application Security ▶▶ Relationships and support of processes to the Application Security management process ▶▶ Implementation of ISO/IEC 27034 and integration of it into its existing processes ▶▶ Realization, operation and validation of application of security throughout its life cycle ▶▶ ecurity into application project S ▶▶ evelopment of Application Security validation D ▶▶ rafting the certification process D DAY 4 Security guidance for specific applications ▶▶ pplications Security Controls based on ISO 27034 A ▶▶ evelopment of metrics, performance indicators and D dashboards in accordance with ISO 27034 ▶▶ SO 27034 internal audit I ▶▶ eview of IT - Security techniques – Application R Security ▶▶ mplementation of a continual improvement program I ▶▶ reparing for an ISO 27034 certification audit P Certification Exam www.pecb.org
  2. 2. WHO SHOULD ATTEND? ▶▶ roject managers or consultants wanting to prepare and to support an organization in the implementation of an P Application Security ▶▶ SO 27034 auditors who wish to fully understand the Application Security implementation process I ▶▶ dministrators A ▶▶ oftware acquirers S ▶▶ oftware development managers S ▶▶ pplication owners A ▶▶ ine managers, who supervise employees L LEARNING OBJECTIVES ▶▶ o understand the implementation of an IT - Security techniques – Application Security in accordance with ISO 27034 T ▶▶ o gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques T required for the effective management of Security techniques – Application Security ▶▶ o understand the relationship between the components of an Application Security including risk management, T controls and compliance with the requirements of different stakeholders of the organization ▶▶ o acquire necessary expertise to support an organization in implementing, managing and maintaining an T Application Security as specified in ISO 27034 ▶▶ o acquire necessary expertise to manage a team implementing ISO 27034 T ▶▶ o develop knowledge and skills required to advise organizations on best practices in the management of T Application Security ▶▶ o improve the capacity for analysis and decision making in the context of Application Security T PECB www.pecb.org Certified ISO 27034 Lead Implementer
  3. 3. EXAMINATION ▶▶ The “Certified ISO/IEC 27034 Lead Implementer” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competence domains: DOMAIN 1: FUNDAMENTAL PRINCIPLES AND CONCEPTS IN APPLICATION SECURITY 1 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can understand, interpret and illustrate the main Application Security concepts related to an Information Technology Application Security (AS) DOMAIN 2: APPLICATION SECURITY CONTROL BEST PRACTICE BASED ON ISO 27002 2 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can understand, interpret and provide guidance on how to implement and manage Application Security controls best practices based on ISO 27002 DOMAIN 3: PLANNING AN AS BASED ON ISO 27034 3 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can plan the implementation of an AS in preparation for an ISO 27034 certification DOMAIN 4: IMPLEMENTING AN AS BASED ON ISO 27034 4 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can implement the processes and security controls of an AS required for an ISO 27034 certification DOMAIN 5: PERFORMANCE EVALUATION, MONITORING AND MEASUREMENT OF AN AS BASED ON 5 ISO 27034 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can evaluate, monitor and measure the performance of an AS in the context of an ISO 27034 certification DOMAIN 6: CONTINUOUS IMPROVEMENT OF AN AS BASED ON ISO 27034 6 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can provide guidance on the continuous improvement of an AS in the context of ISO 27034 DOMAIN 7: PREPARATION FOR AN AS CERTIFICATION AUDIT 7 Main Objective: To ensure that the ISO 27034 Lead Implementer candidate can prepare and assist an organization for the certification of an AS against the ISO 27034 standard ▶▶ The “Certified ISO/IEC 27034 Lead Implementer” exam is available in different languages, including English, French, Spanish and Portuguese ▶▶ Duration: 3 hours ▶▶ For more information about the exam, please visit: www.pecb.org www.pecb.org
  4. 4. CERTIFICATION ▶▶ fter successfully completing the exam, participants can apply for the credentials of Certified ISO/IEC 27034 A Provisional Implementer, Certified ISO/IEC 27034 Implementer or Certified ISO/IEC 27034 Lead Implementer, depending on their level of experience ▶▶ certificate will be issued to participants who successfully pass the exam and comply with all the other A requirements related to the selected credential: Credential Exam Professional Experience ITST Audit Experience ITST Project Experience Other Requirements ISO 27034 Provisional Implementer ISO 27034 Lead Implementer Exam None None None Signing the PECB code of ethics ISO 27034 Lead Implementer Exam Two years One year of Information Technology Security Techniques work experience None Project activities totaling 200 hours Signing the PECB code of ethics ISO 27034 Lead Implementer Exam Five years Two years of Information Technology Security Techniques work experience None Project activities totaling 300 hours Signing the PECB code of ethics ISO 27034 Implementer ISO 27034 Lead Implementer GENERAL INFORMATION ▶▶ ▶▶ ▶▶ ▶▶ C ertification fees are included in the exam price P articipant manual contains over 450 pages of information and practical examples A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued to participants I n case of failure of the exam, participants are allowed to retake it for free under certain conditions For additional information, please contact us at info@pecb.org www.pecb.org PECB Certified ISO 27034 Lead Implementer

×