Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Awareness Training has been designed to provide an understanding of the ISO/IEC 27011:2024 requirements and guidance for the effective implementation of information security controls in telecommunications organisations, to protect information assets, and to raise employee awareness of information security, cybersecurity and privacy.
ISO/IEC 27011:2024 provides guidance on implementing information security controls specifically within telecommunications organisations, based on ISO/IEC 27002.
The training language is Turkish. The training is delivered online.
About the Training
The training covers the purpose and scope of the ISO/IEC 27011:2024 standard, its relationship with ISO/IEC 27001 and ISO/IEC 27002, information security risks in the telecommunications environment, access control, communications and network security, supplier relationships, security incident management, business continuity, privacy, personal data protection, and employees’ responsibilities for information security.
Who Should Attend?
- Employees of telecommunications organisations
- Information security and cybersecurity personnel
- Information technology and network management teams
- Personnel responsible for information security management systems
- Risk and compliance personnel
- Privacy and personal data protection teams
- Operations and technical infrastructure personnel
- Internal auditors
- Personnel responsible for supplier and third-party management
- Professionals wishing to gain a basic understanding of ISO/IEC 27011
Objectives and Outcomes
The aim is for participants to understand the fundamental approach of the ISO/IEC 27011:2024 standard, recognise information security risks in the telecommunications environment, become aware of the key security controls that must be implemented, and understand their responsibilities for information security, cyber security and privacy protection within their own areas of responsibility.
By the End of the Training
Participants will be able to:
- Explain the purpose and scope of the ISO/IEC 27011:2024 standard.
- Understand the relationship between ISO/IEC 27011, ISO/IEC 27001 and ISO/IEC 27002.
- Identify information security risks specific to the telecommunications sector.
- Explain the principles of confidentiality, integrity and availability.
- Assess the importance of access and network security controls.
- Understand security responsibilities within telecommunications infrastructures.
- Explain how information security incidents are managed.
- Recognise security risks arising from suppliers and third parties.
- Understand the relationship between business continuity and information security.
- Apply information security and privacy requirements in their daily work.
Programme and Method
Training Topics
- Purpose, Scope and Key Concepts of the ISO/IEC 27011:2024 Standard
- Relationship Between ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27011
- Information Security and Cybersecurity Risks in Telecommunications Environments
- Organisational, People, Physical and Technological Security Controls
- Identity Management, Access Control, Network and Communications Security
- Protection of Telecommunications Infrastructure, Systems and Services
- Supplier, External Service Provider and Third-Party Security
- Detection, Reporting and Management of Information Security Incidents
- Business Continuity, Disaster Recovery, Privacy and Personal Data Protection
- Employee Awareness, Secure Working Practices and Continual Improvement
Training Method
The training is delivered through subject presentations, explanations of ISO/IEC 27011 controls, security scenarios specific to the telecommunications sector, examples of cybersecurity incidents, risk assessment exercises and awareness case studies.
Attendance and Certificate
Certification Rule
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must achieve a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
Who is the ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Awareness Training suitable for?
It is intended for employees working in information technology, network management, information security, cybersecurity, risk, compliance and operations within the telecommunications sector, as well as professionals seeking to gain basic awareness of ISO/IEC 27011 requirements.
What is the main objective of the training?
The aim is to enable participants to understand information security risks in the telecommunications environment and the controls recommended under ISO/IEC 27011, and to develop an awareness of secure working practices in their daily activities.
Which organisations is ISO/IEC 27011 intended for?
ISO/IEC 27011 provides guidance specifically on implementing ISO/IEC 27002-based information security controls in telecommunications organisations. The current version is ISO/IEC 27011:2024, published in March 2024.
Is ISO/IEC 27011 a certification standard?
Rather than being an independent management system certification standard, ISO/IEC 27011 is sector-specific guidance that supports the implementation of information security controls in telecommunications organisations. The main certification standard for an Information Security Management System is ISO/IEC 27001.
Does the training include practical exercises?
Yes. The training uses examples and case studies relating to telecommunications security, access control, network security, security incidents and third-party risks.
Is there an examination at the end of the training?
Yes. An assessment examination is conducted at the end of the training.
References
- ISO/IEC 27011:2024 Information Security, Cybersecurity and Privacy Protection — Information Security Controls Based on ISO/IEC 27002 for Telecommunications Organizations
- ISO/IEC 27001 Information Security Management Systems
- ISO/IEC 27002 Information Security Controls
- ISO/IEC 27005 Guidance on Managing Information Security Risks
- ISO/IEC 27701 Privacy Information Management Systems
- ISO 22301 Business Continuity Management Systems
Similar trainings
EXEMPLAR002ISO/IEC 27701 Privacy Information Management System Transition Training8 hours · No session plannedEXEMPLAR013ISO/IEC 27701 Privacy Information Management System Awareness Training8 hours · No session plannedEXEMPLAR014ISO/IEC 27701 Privacy Information Management System Internal Auditor Training16 hours · No session planned