IT Governance

An international guide to data security and ISO 27001/ISO 27002

IPSWAC

Created by IT Governance Publishing, Steve G Watkins, Alan Calder

Explore the essentials of IT governance with a focus on information security and risk management. Gain practical knowledge about international standards like ISO 27001 and learn how to align security measures with business objectives. Discover how to protect your organization in an evolving digital landscape.

IT Governance Publishing | Jul 2025 | 486 min

Start Trial

LevelIntermediate

CategoriesCybersecurity, Compliance, Regulatory Standards and Security Frameworks

1Why is Information Security Necessary?
2The Corporate Governance Code, the FRC Guidance on Risk Management, and Sarbanes–Oxley
3ISO 27001
4Organizing Information Security
5Information Security Policy and Scope
6The Risk Assessment and Statement of Applicability
7Mobile and Remote Working
8Human Resources Security
9Asset Management
10Exchanges of Information
11Access Control
12User Access Management
13Supplier Relationships
14Physical and Environmental Security
15Equipment Security
16System and Application Access Control
17Cryptography
18Operations Security
19Controls Against Malicious Software (Malware)
20Networks Security
21System Acquisition, Development, and Maintenance
22Development and Support Processes
23Monitoring and Information Security Incident Management
24Business and Information Security Continuity Management
25Compliance
26The ISO 27001 audit

What You Will Learn

You will build your understanding step by step, starting with core IT governance concepts and moving into hands-on strategies for risk assessment and policy development. Through real-world examples and actionable guidance, you will see how to apply security frameworks and respond to threats in professional settings.

Key Features

Learn to assess and manage IT risks using proven frameworks and tools
Develop effective security policies that align with global standards
Apply practical strategies for regulatory compliance and incident response

Target Audience

Ideal for IT professionals, security managers, and those overseeing cybersecurity in organizations. If you have a background in IT systems and want to deepen your expertise in governance, compliance, and risk management, this content will help you strengthen your skills and prepare for advanced responsibilities in information security.

Related courses