Level 1: Introduction

Typical Courses:

• NQA: ISO 27001 Essentials E-learning, ISO 27001 Introduction and Implementation Training
• BSI: ISO/IEC 27001 Awareness, ISO/IEC 27001 Requirements Training

Learning Outcomes:

• Understand the purpose and benefits of an Information Security Management System (ISMS).
• Learn the structure and key clauses of ISO/IEC 27001:2022.
• Recognise the importance of protecting data confidentiality, integrity, and availability.
• Understand the Plan-Do-Check-Act (PDCA) cycle and Annex SL framework.
• Identify how ISO 27001 supports compliance with regulations such as GDPR.

Level 2: Intermediate

Typical Courses:

• NQA: ISO 27001 Internal Auditor Training (CQI & IRCA Certified)
• BSI: ISO/IEC 27001 Internal Auditor Training

Learning Outcomes:

• Apply ISO 27001 requirements to information security processes.
• Understand risk assessment, asset management, and control implementation.
• Conduct internal audits and report findings.
• Develop and maintain ISMS documentation.
• Support continual improvement of information security practices.

Level 3: Advanced

Typical Courses:

• NQA: ISO 27001 Lead Auditor Training (CQI & IRCA Certified)
• BSI: ISO/IEC 27001 Lead Auditor Training

Learning Outcomes:

• Plan, conduct, and report third-party audits of ISMS.
• Lead audit teams and manage audit programmes.
• Interpret ISO 27001 requirements in complex or high-risk environments.
• Align information security with strategic business goals.
• Demonstrate conformance to ISO 27001 for certification purposes.

Recommended Accreditation

• CQI & IRCA: Recognised globally for auditor qualifications.
• UKAS: Ensures certification bodies meet international standards.

Accredited Providers:

• NQA: CQI & IRCA Approved Training Partner
• BSI: BSI Training Academy with recognised qualifications

Who the Training Is Aimed At

• Introduction Level: Staff new to information security, general employees, and senior leaders seeking awareness.
• Intermediate Level: IT managers, compliance officers, internal auditors, and those responsible for implementing or maintaining the ISMS.
• Advanced Level: Information security professionals, lead auditors, consultants, and those involved in external certification or regulatory compliance.