ISO/IEC 27001
ISO/IEC 27001 is the international standard for an information security management system. It is a requirements standard: clauses 4 to 10 say what the management system must do, and Annex A lists the controls an organisation considers when treating its risks.
The courses below run from Foundation through to lead auditor and lead implementer. The distinction matters: implementing a management system and auditing one are different jobs, examined differently, and the certification that helps depends on which side of the table you sit.
The ISO/IEC 27032 Foundation training course presents the fundamental cybersecurity concepts and principles based on ISO/IEC 27032 and NIST cybersecurity framework. However, the ISO/IEC 27032 standard provides guidelines regarding the protection and long-term sustainability of business processes.
- Delivery: Virtual, In-house, Blended
- Duration: 16 h (2 days)
- Exam: Paper, Online Proctored
ISO/IEC 27035 Foundation training enables you to learn the basic elements to implement an Incident Management Plan and manage Information Security Incidents. During this training course, you will be able to understand Information Security Incident Management processes.
- Delivery: Virtual, In-house, Blended
- Duration: 16 h (2 days)
- Exam: Paper, Online Proctored
ISO/IEC 27001 Lead Auditor training enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognized audit principles, procedures and techniques.
- Delivery: Virtual, In-house, Blended
- Duration: 40 h (5 days)
- Exam: Paper, Online Proctored
