KR eCampusCourses coming soon

KR ECAMPUS

Choose your country

Select your country to switch to the right eCampus site.

My eCampus

Back to courses

Advanced · Self-paced learning

Managing an Information Security Programme

Inquiry This course is not yet bookable.

Plan the annual information security programme for your area: which objectives and risks come first, and what actions and resources are needed? A management review template helps you present the decisions and supporting evidence to leadership.

Build an annual programme from the risks, incidents and audit findings in your area. Assign tasks, dates and staff, and prepare indicators and outstanding risks for management review. Reduced capacity and a conflicting metric prompt you to revise the plan.

In the course case, you compare staff departure records with account status: was access removed within the required period? Assess the sample, specify a correction and plan the next check. Keep the annual programme and action tracker for further work in your management cycle.

What you will work on

  • You create a prioritised annual information security programme for a defined area of responsibility and justify its selection, sequence and resource needs.
  • You prepare a management review template that presents decisions, metrics, risks and unresolved points for leadership approval.
  • You check departure records and active accounts against the required deadline.

Who it is for

  • Information security officers
  • Information security managers
  • Security management staff with programme responsibility

Topics

  • Mandate, scope, protection objectives and risk assumptions
  • Prioritisation and resourcing of the annual programme
  • Management review: metrics, evidence and decision papers
  • Action tracking, effectiveness checks and escalation
  • Interfaces with risk, supply-chain and incident processes
  • Assumptions, residual risk, documentation and revision

Your result

Your annual programme contains prioritised security tasks, owners, dates and resources. The completed account check shows how to assess and follow up an action’s effectiveness.

Prerequisites

Participants need foundational knowledge of information security management and access to objectives, risks, actions and capacity in their own area; confidential details can be anonymised. An anonymised substitute case is provided as an alternative.

Format and approach

Planned as a digital self-paced course with approximately 16–20 hours of work, individual programme planning and explained self-checks.

Planned learning time: 16–20 hours

Enquire about this course

Advanced · Self-paced learning

ISMS Foundations for Managers

Plan the start of an information security management system (ISMS) for a defined area. Establish its scope, protection objectives and roles, and record initial risks and actions. You can take the resulting concept forward with the people responsible in your organisation.

Read the description

Advanced · Self-paced learning

Internal ISMS Auditing: Planning and Findings

An internal ISMS audit should give management a reliable basis for decisions on corrective action and further review. Plan an audit, assess different evidence and write findings. Build your audit programme, audit plan and template for the management report.

Read the description