Information Security in the Workplace | Protecting Information in Everyday Work
This course helps learners understand why information needs to be protected, recognize common risks and develop secure working habits. It focuses on basic, practical ways to protect information in everyday work, with reference to ISO/IEC 27001:2022.
Course objectives
- Understand why protecting information matters for organizational operations, customers’ interests and the reputation of the business.
- Gain a basic understanding of an Information Security Management System (ISMS), the principles of confidentiality, integrity and availability, and a risk-based approach.
- Recognize common threats, vulnerabilities and basic measures for protecting information in the workplace.
- Know how to work securely and report or respond to incidents and unusual activity in line with assigned roles and responsibilities.
Course outline · 6 lessons
-
Information and information security in the workplace
Information · Assets · Shared responsibilityUnderstand the value of information, the forms it takes and why everyone has a role in protecting it.
-
Three core principles and risk-based thinking
Confidentiality · Integrity · Availability · RiskExplore the three principles and recognize threats and vulnerabilities through everyday examples, considering likelihood and impact.
-
ISO/IEC 27001 and the Information Security Management System
ISO/IEC 27001 · ISMS · Individual rolesUnderstand the purpose of an ISMS, gain an overview of Clauses 4–10 and relate individual responsibilities to everyday work.
-
Basic measures for protecting information
Organizational · People · Physical · TechnologicalRecognize the four groups of information protection measures and understand why controls are selected according to risks and organizational circumstances.
-
Protecting information in everyday work
Accounts · Email · Data · Incident reportingApply secure working practices through scenarios involving suspicious emails, document sharing, remote work, lost devices and data sent to the wrong recipient.
-
Course review and final assessment
Key points · Scenario-based questions · QuizReview the key topics and complete five knowledge and scenario-based questions. The trial version requires at least four correct answers out of five.
