Information Security Governance and ISO 27001

Information Security Governance is a five-day senior information-security governance course delivered by Mars Training Centre in London, Dubai, Munich, Seoul and Kuala Lumpur — designed for chief information security officers, senior IT-risk leaders, audit committee members and executives accountable for the security of their organisation's information assets.

Cyber and information security have moved from the IT department to the boardroom. Major incidents now make front-page news, drive market-value loss and end careers. Regulators expect boards to understand cyber risk in the same way they understand financial risk. The major frameworks — ISO/IEC 27001 for information-security management, NIST Cybersecurity Framework for control architecture, and COBIT for governance — give senior leaders a common language, but implementing them well requires more than a certificate on a wall.

This programme is built for senior leaders who must govern, not operate, information security. It covers the governance architecture, the risk discipline, the control frameworks, the incident response and the board conversation that modern information-security leadership requires. It is delivered by senior practitioners drawn from the Mars panel.

What You Will Learn

By the end of this programme, you will be able to:

• Apply the ISO/IEC 27001, NIST CSF and COBIT frameworks to information-security governance.
• Design the information-security governance architecture: roles, committees and reporting lines.
• Build an information-security risk programme aligned with enterprise risk management.
• Evaluate the maturity of an information-security management system.
• Lead board-level conversations on cyber and information-security risk.
• Design and test an incident-response and crisis-communications plan.
• Govern third-party and supply-chain information-security risk.
• Embed security culture and awareness across the organisation.

How You Will Benefit

You will leave with a senior practitioner's command of information-security governance and a personal plan to lift your programme, along with a Mars Certificate of Completion.

Your organisation will gain a security leader who can connect cyber risk to enterprise value, satisfy the board, withstand regulatory scrutiny and respond to incidents with credibility.

Who This Programme Is For

This programme is designed for senior leaders accountable for information security, including:

• Chief information security officers and heads of information security
• Chief information officers with security oversight
• Heads of IT risk and IT compliance
• Heads of internal audit with technology assurance
• Audit committee members reviewing cyber-risk oversight
• Chief risk officers and heads of operational risk
• General counsel and senior legal advisers with cyber obligations
• Senior managers preparing for CISO or technology-risk roles

The seniority floor is senior manager and above in security, IT, risk, audit or executive functions. The week is governance-led rather than technical, and closes with a personal action plan built with faculty coaching.