Risk Management in ISMS according to ISO/IEC 27005 (ISMS4)

Cybersecurity, ISMS and GDPR

Risk is the central concept of an information security management system, and risk management is a core organizational process. This course explains ISO/IEC 27005 as a practical guide for identifying and assessing risks in an ISMS aligned with ISO/IEC 27001.

Knowing the standard alone is not enough for effective risk management in real organisations. The training adds practical guidance, proven methods and insights from other frameworks and standards to help you treat, monitor and communicate security risks.

Location, current course term



Brno + online (volitelně)
11/3/2025 - 11/4/2025 CZECH
Order
1/26/2026 - 1/27/2026 CZECH
Order
Praha + online (volitelně)
11/3/2025 - 11/4/2025 CZECH
Order
1/26/2026 - 1/27/2026 CZECH
Order
Custom Customized Training (date, location, content, duration)

The course:

Hide detail
  • Day 1: Context and objectives of ISMS, core terminology, overview of the ISO/IEC 27000 family - analysis of risk factors and drivers
  • Day 2: Risk assessment methods and risk treatment options - communication, monitoring and continual improvement
  • Note: Daily content is not fixed and will be adapted flexibly to participants' needs.
Assumed knowledge:
Basic knowledge of organizational processes and elementary IT security awareness.
Schedule:
2 days (9:00 AM - 5:00 PM )
Course price:
516.00 € ( 624.36 € incl. 21% VAT)
Language:

Vybrané zákaznické reference

Letiště Praha a.s., Petr S.
Risk Management in ISMS according to ISO/IEC 27005 ( ISMS4)
"Kurz splnil nadmíru má očekávání. Děkuji"
Ministerstvo dopravy a výstavby Slovenskej republiky, Pavel J.
Risk Management in ISMS according to ISO/IEC 27005 ( ISMS4)
"Bol som veľmi spokojný a dúfam v ďalšie kurzy Vašej spoločnosti."
Ministerstvo dopravy a výstavby Slovenskej republiky, Juraj K.
Risk Management in ISMS according to ISO/IEC 27005 ( ISMS4)
"Možnosť prediskutovať v reálnom čase aj praktické príklady a návrhy ich realizácie v praxi. "