Dates and Venues

Learn to implement an ISO 27001 based information security management system (ISMS) that mitigates risks around the use and storage of information, on this ISO 27001 Implementation training course.

The first day of this 2-day course provides a detailed overview of the standard, ISO/IEC 27001:2022, exploring its benefits, structure and requirements.

On the second day delegates will develop their implementation skills through workshops and activities led by an expert ISMS tutor.  Using a central case study, students will build key elements of an ISMS by walking through ISO/IEC 27001:2022 and creating documented information for specific clauses and controls.

Upon completion of the course, delegates will understand the actions required at key stages in an ISMS implementation project, as well as the process for ISO 27001 certification.

This training course is suitable for:

  • newly-assigned members of staff wanting gain a greater understanding of how an effective ISMS is developed
  • those in charge of implementing an ISMS based on ISO 27001
  • anyone supporting the implementation of an ISMS
  • anyone wanting to improve an existing ISMS to meet the requirements of ISO 27001
  • those at organisations seeking certification to ISO 27001

No prior knowledge of ISO 27001 is required as the course includes the Introduction to ISO 27001 training course.

Topics covered in this course include:

  • overview and analysis of ISO 27001
  • the relationship between ISO 27001 and the ISO 27000 family
  • key components to an information security management system (ISMS)
  • identifying and developing ISMS policies, processes and procedures
  • methods for developing an ISMS implementation plan
  • risk management
  • support and maintenance of an ISO 27001 ISMS
  • controls – Annex A and other requirements
  • why some ISMS implementations fail
  • the certification process and certification body selection

The course is based around the following structure with workshops and case study to apply knowledge learned:

  • Day 1
    • WELCOME AND INTRODUCTION
    • Module 1 Information Security
    • Module 2 Information Security Management Systems
    • Workshop: What are your current issues?
    • Workshop: The Cloud – Benefits and Risks
    • Module 3 Risk Management
    • Workshop: Risk Assessment
    • Module 4 Annex A Controls
    • Workshop: ISO 27001:2022 Annex A Controls
    • Module 5 Aligned Standards
    • Module 6 ISMS Considerations and Features
    • Module 7 ISO 27001 Certification
    • Module 8 Knowledge Quiz
    • Summary
    • CLOSE
  • Day 2
    • Review of Day 1
    • Module 9 The Benefits of ISO 27001
    • Module 10 Key Elements of an ISMS
    • Case study briefing
    • Workshop: Clauses 4 to 6
    • Workshop: Clause 6 continued and Annex A
    • Module 11 Support, Operation, Evaluation
    • Module 12 Other requirements (Annex A)
    • Module 13 Why implementations fail
    • Summary
    • CLOSE

After successful completion of this ISO 27001 Implementation training course delegates will understand:

  • the structure and requirements of ISO 27001
  • the key components of an information security management system (ISMS)
  • the necessary steps of an implementation project, including how to; plan, create policy, assess and manage risk, create objectives, organise training and implement controls
  • ISMS documentation requirements
  • the certification process
  • how to support and maintain an effective ISMS

[/ tabgroup]