Session 1: Introduction to COBIT 5 for Information Security

• Overview of COBIT 5 framework
• Detailed overview of COBIT 5 for Information Security, and its components
• Information Security governance vs Information Security management
• An Information Security program: the COBIT 5 for Information Security way
• Why should you choose COBIT 5 for Information Security

Session 2: Detailed understanding of COBIT 5 enablers for implementing information security

• Principles, policies and frameworks
• Processes
• Organisational structures
• Culture, ethics and behaviour
• Information
• Services, infrastructure and applications
• People, skills and competencies

Session 3: (Re)-Aligning your information security initiatives using COBIT 5 for Information Security

• Critical success factors of a successful Information Security program
• Information Security program challenges
• Assessing your Information Security needs
• Enabling change using a life cycle approach
• (Re)-Aligning your Information Security initiatives

Session 4: Implementing or improving an Information Security Management System (ISMS) using COBIT 5 for Information Security

• Overview of ISMS (based on ISO/IEC 27001:2005 requirements)
• Strengths and weaknesses of ISO 270xx series of standards and guidelines
• Identifying an ISMS’ components that doesn’t work
• Applying COBIT 5 for Information Security guidance to implement / improve an ISMS