ISO 33072:2016 Security Maturity & Capability Assessment

• آشنایی با مفاهیم قابلیت
• آشنایی با مفاهیم بلوغ
• آشنایی با مفاهیم امنیت اطلاعات
• آشنایی با روش های ارزیابی بلوغ
• آشنایی با سطوح بلوغ

پیش نیاز رسمی برای این دوره وجود ندارد

این دوره ی آموزشی برای کلیه علاقه مندان به امنیت اطلاعات و ارزیابی بلوغ آن از جمله مدیران فناوری اطلاعات، مدیران حسابرسی داخلی،  مدیریان سیستم ها و روش ها کاربرددارد

Over View of the Process Assessment Model

• Introduction to Overview
• Structure of the Process Assessment Model
• Processes
• Process Dimension
• Capability Dimension
• Assessment Indicators
• Process Capability Indicators
• Process Performance Indicators
• Measuring Process Capability

The Process Dimension and Process Performance Indicators

• Assets Management
• Capacity Management
• Change Management
• Communication Management
• Configuration Management
• Documentation Management
• Equipment Management
• Human Resource employment Management
• Human Resource Management
• Improvement
• Incident Management
• Infrastructure and work environment
• Internal Audit
• Leadership
• Management review
• Non-conformity management
• Operational Implementation and control
• Operation Planning
• Performance evaluation
• Product/Service/Release
• Product/Service/System requirement
• Risk and opportunity management
• Service Availability management
• Service continuity management
• Supplier management
• Technical data preservation and recovery

Process Capability Indicators

• Process capability Levels and process attribute
• Process capability Level 0: Incomplete process
• Process capability Level 1: Performed process
• Process capability Level 2: Managed process
• Process capability Level 3: Established process
• Process capability Level 4: Predictable process
• Process capability Level 5: Innovation process
• Related processes for process attributes

Conformity of the process assessment model

• Requirements for process assessment models
• Process assessment model scope
• Requirements for process assessment models
• Assessment indicators
• Mapping process assessment models to process reference models
• Expression of assessment results

Input and output characteristics

• Generic input and outputs
• Specific inputs and outputs

Association between base practice and ISO/IEC 27001 Requirements

• Associations of base practice with requirements
• Association of requirements with base practice
• Base practice that have no associated requirements

ISO مرجع علمی

مدرس ایرانی IT House

ندارد