ISO 27001 Information Security Training

A comprehensive range of ISO 27001:2022 training courses is available to help individuals and organisations understand, implement, and audit Information Security Management Systems (ISMS). These courses are structured across three levels—Introduction, Intermediate, and Advanced—and are delivered via e-learning, virtual tutor-led sessions, and in-house formats.

Typical Training Levels

Level 1 – Introduction

  • 🗸 Essentials E-Learning: A self-paced course covering the fundamentals of ISO 27001:2022, including definitions, structure, and the Plan-Do-Check-Act (PDCA) cycle. Designed for multiple learning styles with interactive elements.
  • 🗸 Introduction & Implementation Course (Virtual): A two-day tutor-led course covering the standard’s structure, Annex A controls, risk assessment, asset management, and how to prepare a Statement of Applicability (SoA).
  • 🗸 Transition Course: A one-day course focused on the changes from ISO 27001:2013 to ISO 27001:2022, including updates to Annex A and the risk register.

Level 2 – Intermediate

  • 🗸 Internal Auditor Course: A two-day course aligned with ISO 19011, teaching how to plan, conduct, and report internal audits of an ISMS.
  • 🗸 CQI and IRCA Certified Internal Auditor: Offers formal qualification for internal auditors, focusing on audit techniques, risk-based thinking, and compliance evaluation.

Level 3 – Advanced

  • 🗸 Lead Auditor Conversion Course: A three-day course for those already certified in another ISO standard, transitioning to ISO 27001 auditing.
  • 🗸 CQI and IRCA Certified Lead Auditor: A five-day intensive course for professionals conducting third-party audits, aligned with ISO 19011 and ISO/IEC 17021. Covers audit planning, execution, reporting, and team leadership.

Learning Outcomes

Participants will:

  • 🗸 Understand the structure and intent of ISO 27001:2022.
  • 🗸 Learn how to implement and maintain an effective ISMS.
  • 🗸 Gain auditing skills for internal and external assessments.
  • 🗸 Be prepared for roles such as Information Security Manager, Internal Auditor, or Lead Auditor.

Target Audience

  • 🗸 IT and security professionals
  • 🗸 Managers responsible for information security
  • 🗸 Individuals seeking CQI and IRCA auditor certification
  • 🗸 Organisations aiming to improve data protection and regulatory compliance

Request a callback for more information