SECURITY MANAGEMENT IN ICT ENVIRONMENT

Content

Information Security Management Policy

• What is Information Security?
• Why is Information Security Needed?
• Establishing Security Requirements
• Assessing Security Risks
• Selecting Controls
• Information Security Starting Point
• Critical Success Factors

Asset and Organizational Security

• Information Security Infrastructure
• Accountability for Assets
• Information Classification
• Security of Third Party Access

Communications and Operations Management

• Operational Procedures and Responsibilities
• System Planning and Acceptance
• Protection against Malicious Software
• Network Management
• Media Handling and Security
• Exchanges of Information and Software

Access Control

• Business Requirement for Access Control
• User Access Management and Responsibilities
• Network Access Control
• Operating System Access Control
• Monitoring System Access and Use

Systems Development and Maintenance

• Security Requirements of Systems
• Security in Application Systems
• Cryptographic Controls
• Security of System Files
• Security in Development and Support Processes

Physical and Environmental Security

• Secure Areas
• Equipment Security
• General Controls
• Responding to Security Incidents and Malfunctions
• Security Personnel Training

FOR WHOM: CIOs, IT Department Managers, IT Executives, Heads of Departments, Business Managers, System Administrators, Security Personnel, Database Administrators, IT Professionals and anyone responsible for ensuring securing enterprises’ assets and business continuity of an organization’s systems.

DATE:                 19th – 21st February, 2025

                               13th – 15th August, 2025