Government sector builds capacity to manage information security

A recent program on establishing and managing an ISO 27000 compliant ISMS and ISO 27001 Lead Auditor course was organized recently by CIS.

The CIS runs a series of Information Security seminars and courses for employees of ITA and other Omani Government employees, with the objective to enhance security consciousness as well as to promote the creation of skilled professionals in this vital area of Information Security.

In order to achieve secure and trustworthy IT operations within the government sector organizations, it is very relevant to establish a common understanding about 'Information Security Management System' (ISMS). This includes an introduction to Information Security Governance and associated communication about the roles and responsibilities necessary to establish and maintain it. The training programs will discuss all these matters in addition to a demonstration of the implementation of an Information Security Management System based on the ISO/IEC 27001 Standard. Participants from different government entities will be certified by the BSI (British Standard Institute).

Apart from enhancing the skills of government employees to tackle information security risks and threats, this structured course aims to transfer deeper knowledge about Information Security and discuss strategies to effectively manage Information Security risks. The training is focused upon selected IT Managers, Information Security officers and Information Security Engineers.

The training course has several modules including, threats and risks to information in the digital world, business continuity management, disaster recovery, establishing and managing an ISO 27001 compliant ISMS. Selected security officers, security Engineers and IT engineers from different ministries will undergo the ISO 27001 Lead Auditor course and qualify for certification on completion.