一、資訊安全管理系統簡介 • 資訊安全管理系統簡介 • ISO/IEC 27002 介紹 • ISO/IEC 27002 考試說明 二、資訊與安全Information and Security • The Concept of Information(資訊的觀念) • Value of Information(資訊的價值) • Reliability Aspects(資訊的可靠性) 三、威脅與風險Threats and Risks • Threats and Risks(威脅與風險) • The Relationships between Threats, Risks and the Reliability of Information(威脅、風險及資訊可靠性之間的關係) 四、方法與組織 Approach and Organization • Security Policy and Security Organization(安全性政策及安全性組織) • Components of the Security Organization(組成部分) • Incident Management(事故管理) 五、措施Measures • Importance of Measures(措施的重要性) • Physical Security Measures(實體安全措施) • Technical Security Measures(技術措施) • Organizational Measures(組織措施) 六、法律規章Legislation and Regulations • Legislation and Regulations(法律規章) 七、模擬考試Mock Exam • 模擬考試與逐題解說