Status message
Masterclass Review Framework Information Security
In this master class, you will study the 2021 Assessment Framework (SURFaudit NBA model) in depth, so that you can properly carry out an assessment, for example in the context of the benchmark. With inspiring in-depth sessions and keynotes, you will be well prepared when you start working with the assessment framework.
- 14 — 15 Feb 2023
-
Time14 February 13:00 - 15 February 16:00
-
LocationSURF office, Utrecht
Background
In higher education and mbo, the NBA Maturity Model for Information Security is used as the basis for the assessment framework for the information security benchmark.
Getting started with the Information Security Assessment Framework
The Information Security Assessment Framework master class will help you make the transition to this new assessment framework, and is also interesting for FGs, privacy officers and auditors. Under the guidance of expert Ludo Cuijpers, you get to work hands-on with the statements from the NBA assessment framework. There is plenty of room to exchange experiences and discuss good practices with each other. In addition, inspiring keynotes and in-depth sessions are scheduled by various experts. In between, there will be plenty of opportunity for informal contact.
Programme
During the four sessions, we will discuss all fifteen domains of the NBA model. Below is the outline of the programme.
Tuesday
| 13.00 |
General introduction to the NBA model and Benchmark IB (SURF / MBO Digitaal) |
| 13.15 |
Presentation governance and HRM (Ludo Cuijpers, VISTA college) |
| 16.00 | Break |
| 17.00 | Presentation outsourcing and chain security (Niels Dutij, MBO Digitaal) Domains NBA model covered: Physical Security, Computer Operations, Supply Chain Management |
| 18.00 | Presentation architecture (Niels Dutij, MBO Digital) |
| 18.45 | Presentation risk management (Maurits Toet, IT auditor Cerrix) Domain NBA model covered: Risk Management |
| 20.00 | Dinner |
Wednesday
| 9.00 |
Keynote on security management (Hub Gerats, Fontys University of Applied Sciences) |
| 12.00 | Lunch |
| 13.00 - 16.00 |
Keynote on configuration management, incident/change management, ITIL processes (Hub Gerats, Fontys University of Applied Sciences) Guide for carrying out or commissioning an IT audit Joint closing, exchange of experiences and conclusions |
Register
Register for this master class by 10 February at the latest.
Number of participants
The maximum number of participants is 15; if fewer than 10 participants, the master class will not take place.
Costs
The costs are 500 euro per participant (excluding VAT). SURF will arrange registration for the masterclasses. The SURF registration system only accepts direct payment (iDeal or credit card). After completing your registration, you will receive an e-mail as confirmation with the invoice attached.
Can't make it on this date?
This Masterclass will also be held on 28 February as a one-day online Masterclass. If you want to know more about this master class, press the button for more information