This module introduces the ISO 27001 standard, guiding learners through its structure, implementation process, and the importance of legal compliance. Learners will explore the Plan-Do-Check-Act (PDCA) cycle, conduct a SWOT analysis for ISMS implementation, and understand the benefits of adopting an information security management system.

This module introduces the key categories of ISO 27001 information security controls, emphasizing a risk-based approach to selecting and implementing organizational, people, and technological safeguards. Learners will gain practical insights into how these controls are structured and applied within an organization, with a focus on the Statement of Applicability and Annex A requirements.

This module introduces the principles and practices of information security risk management, focusing on international standards such as ISO 31000 and ISO 27005. Learners will explore risk assessment, treatment planning, and mitigation strategies to protect organizational assets and align with business objectives. Practical guidance on implementing risk management frameworks and developing risk treatment plans is also provided.

This module guides learners through the key phases of implementing an Information Security Management System (ISMS) aligned with ISO 27001. You will explore scope definition, risk assessment, staff training, performance monitoring, and continuous improvement to ensure effective protection of organizational information assets.

This module introduces the principles and practices of managing information security incidents, including how to identify, respond to, and document incidents and breaches. Learners will explore the incident management lifecycle, relevant ISO standards, and the roles and responsibilities of incident response teams. Practical strategies for post-incident analysis and continuous improvement are also covered.

This module guides learners through real-world case studies on implementing Information Security Management Systems (ISMS), developing Statements of Applicability (SoA), and managing security incidents. Learners will explore risk assessment methodologies, the selection and application of ISO 27001 controls, and the integration of people and technological safeguards to enhance organizational security.

This module introduces the foundational principles and concepts of ISO auditing, including audit types, methods, and the importance of aligning audit programs with organizational objectives. Learners will gain practical insights into planning audits, understanding stakeholder needs, and establishing effective audit programs. The module also covers best practices for conducting site visits and managing audit resources.

This module guides learners through the essential steps of planning, preparing, and executing audits in accordance with ISO 19011. Participants will gain practical insights into initiating audits, assigning roles, and ensuring effective communication with process owners. By the end, learners will be equipped to contribute to quality and compliance in management systems.

This module guides learners through the final stages of the audit process, focusing on effective audit reporting, follow-up actions, and the application of continual improvement strategies such as PDCA. Learners will gain practical skills to ensure audit findings are addressed and information security processes are enhanced over time.

This module explores the essential competencies required for effective auditing, including personal behavior, technical expertise, and auditing skills as outlined in ISO 19011. Learners will discover how to align auditor capabilities with audit objectives and understand the unique responsibilities of audit team leaders. The module also distinguishes between generic and sector-specific knowledge necessary for successful audit performance.

This module provides practical guidance on planning ISO 27001 audits, reporting nonconformities, and preparing effective audit reports. Through real-world case studies, learners will gain insights into identifying deviations and documenting findings to support continual improvement in information security management.