ISO/IEC 27001 Lead Implementer
Take an organisation from intent to a working information security management system.
About this course
Take an organisation from intent to a working information security management system. Over five days you will interpret ISO/IEC 27001, define scope and leadership commitment, run a risk assessment and build the Statement of Applicability that guides control selection.
You will then plan how controls, documentation and awareness are put in place, how the system is monitored and improved, and how to prepare for a certification audit. The course leads into the PECB certification exam.
What you'll learn
- Explain the concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
- Interpret the requirements of ISO/IEC 27001 and the controls of ISO/IEC 27002 from an implementer's perspective
- Plan an ISMS project, including scope, leadership commitment and resources
- Carry out an information security risk assessment and prepare a Statement of Applicability
- Implement processes, controls and documentation that meet the standard
- Monitor, measure and continually improve the ISMS
- Prepare an organisation for a certification audit
Curriculum
- Training course objectives and structure
- Standards and regulatory frameworks
- Fundamental concepts of information security
- The ISO/IEC 27001 structure and requirements
- Understanding the organisation and its context
- Defining the ISMS scope
- Leadership and project approval
- Organisational structure and roles
- Information security policy
- Risk assessment methodology
- Risk assessment and treatment
- Statement of Applicability
- Selecting and designing controls
- Documented information
- Awareness, training and communication
- Managing security operations and incidents
- Monitoring, measurement and evaluation
- Internal audit
- Management review
- Treatment of nonconformities
- Corrective action
- Continual improvement of the ISMS
- The certification audit process
- Readiness checks
- Closing of the training course
- Certification exam
Who it's for
ISMS managers, IT and security professionals, consultants and project leads responsible for implementing ISO/IEC 27001.
Before you start
- A fundamental understanding of information security concepts
- Some familiarity with ISO/IEC 27001 is helpful
Prepares for
Related courses
More in Cybersecurity Skills & Standards →Cyber Security for the End User - Identifying and Preventing Advanced Threats - Intermediate
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Awareness
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Foundation
Cybersecurity Skills & Standards
View course →DVMS Cyber Resilience Professional Practitioner
Cybersecurity Skills & Standards
View course →Ethical Hacker Bootcamp
Cybersecurity Skills & Standards
View course →Hacking & Defending Active Directory
Cybersecurity Skills & Standards
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.