This module explores the core components of ISO 27001, focusing on the implementation of an Information Security Management System (ISMS) through the PDCA cycle and key clauses. Learners will gain an understanding of how to establish organizational context, lead security efforts, plan for risks, and continuously improve information security practices.

This module explores key administrative controls in information security management, including governance, policy development, incident response, and supplier management. Learners will gain insights into managing assets, access controls, and compliance requirements to strengthen organizational security frameworks.

This module explores strategies for managing human resources securely throughout the employee lifecycle. Learners will gain insights into building a strong security culture, implementing disciplinary processes, and ensuring secure onboarding and offboarding. It emphasizes the role of operational discipline in maintaining organizational security.

This module covers key aspects of physical security, including perimeter protection, access control, and the management of environmental and asset-related risks. Learners will gain an understanding of how to secure physical spaces and protect critical infrastructure from threats.

This module covers essential technological controls for securing digital environments, including endpoint management, data protection, network security, and secure software development practices. Learners will gain an understanding of how to implement and manage these controls effectively.

This module guides learners through the step-by-step implementation of an Information Security Management System (ISMS). It covers essential phases such as project initiation, gap analysis, risk assessment, control implementation, and continual improvement. Learners will gain practical knowledge on how to design and manage an effective ISMS within an organization.

This module explores the fundamental principles and practical steps involved in conducting ISMS audits. Learners will gain an understanding of audit planning, execution, evidence evaluation, and reporting, as well as the competencies required for effective auditing. The content provides actionable knowledge to enhance compliance and operational integrity.

This module covers the key steps and considerations for preparing for, maintaining, and improving ISO 27001 certification. Learners will gain practical insights into choosing a certification body, managing audits, and sustaining information security practices over time.