IT Security Officer (TÜV)

First seminar day

• Basics of information security
  • Current importance of information security
  • Basic terms
  • Cybercrime

• Legal framework of information security
  • Overview of relevant laws
  • IT Security Act
  • Data protection

• Relevant standards
  • ISO 2700x
  • BSI IT-Grundschutz

Second seminar day

• Handling information security incidents
  • Responsibilities and procedures
  • Possible causes of information security incidents

• Information security management system according to ISO 27001
  • Management systems and their control loops
  • Structure of an ISMS according to ISO 27001
  • Documentation of the ISMS in accordance with ISO 27001
  • Options for tool-based documentation

• Context - scope - values - guideline
  • Context of the organisation and interested parties
  • ISMS scope / area of application
  • Management and support
  • Assets / Values

• Organisation of information security
  • Basics
  • Roles in the information security process
  • IT security officer
  • Liability
  • Exemplary organisational structure
  • Communication and reporting channels in the ISMS
  • Contact with authorities and special interest groups
  • Information security in project management

Third seminar day

• Technical measures and objectives
  • Access management
  • Network security
  • Technical protective measures
  • Cloud security
  • Remote access
  • IT operations
  • Documented operating procedures and change management
  • Data protection and backup
  • Malware
  • Logging
  • Control of software in operation
  • Handling technical vulnerabilities
  • Dealing with mobile devices
  • Protection against external and environmental threats
  • Threats to the infrastructure

• Basics of risk management
• The ISO 27001
  • Statement of Applicability (SOA)
  • ISO 27001 standard chapter
  • Controls ISO 27001

Fourth seminar day

• Emergency management according to BSI 100-4
  • Terms of IT emergency management
  • The emergency management process
  • Initiation of the emergency management process
  • Conceptualisation of emergency management
  • Implementation of the emergency preparedness concept
  • Emergency response and crisis management
  • Tests and exercises
  • Continuous improvement of emergency management

• Security awareness
  • Security awareness in the company
  • Security awareness
  • Success criteria for campaigns
  • Examples of sensitisation measures
  • Methodical foundation process

• TÜV certificate audit

The examination is conducted by the independent personal certification body PersCert TÜV of TÜV Rheinland. After passing the exam, you will receive a certificate from PersCert TÜV that certifies your qualification as an "IT Security Officer (TÜV)". PersCert TÜV documents the requirements for your qualification on the globally accessible internet platform www.certipedia.com under the test mark with the ID 0000063482. Use the test mark with your individual ID as an advertising signet for the conditions shown at www.tuv.com/perscert. Strengthen the trust of customers and interested parties with your documented qualification.

Examination fees: €275.00 plus VAT (included in the participant price)

• All IT security certificates (TÜV) are valid for 3 years for new certifications from 1 July 2018.

Recertification is possible with proof of continued professional activity in the specialist area and additional participation in at least one subject-relevant further training course during the period of validity of the certificate, with a minimum scope of 8 units. Proof can be provided, for example, in the form of a copy of the certificate of attendance. For details, please refer to the relevant Certipedia entry.

• As a participant in this TÜV course in the field of information security/IT security, you will receive eight weeks of free access to the TÜV Media online platform "Information Security Management digital".

This contains comprehensive information and work aids on the subject of information security.

• This seminar is offered with a digital exam preparation "Fit for Test", a multiple choice test on the learning content for optimal exam preparation. Use is free of charge. Further information at: https://akademie.tuv.com/fit-for-test. You will receive access at the start of the seminar.

• You will also receive 3-week free access to the Information Security Awareness Game. This "serious game" presents an excellent opportunity for companies to sensitise and train employees with regard to the importance of information security.