Club 27001

The Club 27001 (http://www.club-27001.fr/), a non profit organisation, is organising on Thursday 19th, November 2009 its third annual conference on ISO 27001 standards.

The topics on which we are enquiring proposals are (the list is not exhaustive):

• Experience feedbacks on using the standards
  • Implementation of one of the standards 
  • Use without certification 
  • Certified organisations 
  • Worldwide experience feedbacks 
• ISMS Implementation
  • ISO 27003, use of existing information security management 
  • How to involve top executive management?
  • Integrated management systems (ISO 9001, 14001, 20000-1, etc.) or separated management systems?
  • Implementation of internal audit 
  • Use of ISO 19011 and ISO 27006 
• Links between ISO 27001 and other standards, system of reference or regulatory texts :
  • ISO 20000-1 / ITIL, BS25599, CobiT, SoX, Bâle II, Solvency II, LSF, government standards and regulation, etc. 
  • Mutualisation, opposition, complementarities, starting point, etc. 
• Risk management in an ISMS
  • ISO 27005 standard 
  • Previous methodology status (EBIOS, MEHARI, ERSI-CAP, OCTAVE, etc.) 
  • Business units involvement 
  • Risk assessment 
• Designing ISMS indicators or metrics
  • ISO 27004 
  • Links to other system of reference 
• Certification and ISMS audits
  • Experience of accreditation bodies, certification bodies, of auditors and audited 
• Application in industries
  • ISO 27011 (Telecommunications), ISO 27799 (Healthcare), WLA-SCS (Lottery/Gaming...), etc. 
  • Usefulness and use of the standard applied to a specific business 
• Training and individual certifications
  • Why and how train on ISMS

The proposals have to include a feedback on a practical experience and cannot be the presentation of a service offer, of a product or more generally of a business solution. The program committee will be sensitive to practical aspects of proposals. Travel expenses could be covered to some extent by the club 27001.

Presentations will last between 35 to 45 minutes and can be carried out either in French or English.

 Content of the proposals to be sent to This e-mail address is being protected from spambots. You need JavaScript enabled to view it :
- Name of the author, biography and affiliation
- One page synopsis of the presentation with a content summary

Schedule :

- July, 10th 2009: Limit date for receiving the proposals
- September, 18th 2009: Notification to authors and publication of tentative program
- October, 11th 2009: Publication of the final program
- November, 13th 2009: Presentations reception
- November, 19th 2009: Conference
 

The program committee is composed of the following members of the Club ISO 27001:

  - Nicolas Andreu, Devoteam
  - Bertrand Augé, Kleverware, trésorier
  - Gérôme Billois, Solucom
  - Dominique Ciupa, Bull
  - Eric Doyen, Crédit Immobilier, président
  - Emmanuel Garnier, Systalians, vice-président
  - Catherine Guelou, CRAM-Bretagne
  - Loic Guézo, IBM
  - Bruno Michaud, Trans-Z
  - Freddy Milesi, Sekoia
  - Anne Mur, Edelweb
  - Dominique Pourcellié, CNAM
  - Hervé Schauer, HSC, secretaire
  - Jérôme Vivier, Thales