In this training, we cover all aspects of the Information Security Management System (ISMS) and you will learn to implement this as a 'normal' business process. You will gain a comprehensive understanding of all the concepts, standards, methods, and techniques needed to effectively manage an ISMS. You will also learn to recognize and apply the relationship between the various components of the ISO 27000 series in the different phases of the ISMS.

This training is important for both professionals who assist organizations with the implementation and/or maintenance of an ISMS and for the manager within an organization who oversees this process - for example, in preparation for an external ISO 27001 certification audit.

The training days consist of a combination of theory and practice:

• Lessons that are richly filled with practical examples based on real cases
• Practical assignments based on a full case study including role play
• A mock exam that is comparable to the actual certification exam

In the ISO 27001 Lead Implementer exam, you will be tested on the following domains, for which the training will prepare you:

• Domain 1: Fundamental principles and concepts of information security
• Domain 2: Information security controls best practices based on ISO 27002
• Domain 3: Planning an 'Information Security Management System (ISMS)' based on ISO 27001
• Domain 4: Implementing an 'Information Security Management System (ISMS)' based on ISO 27001
• Domain 5: Evaluating, monitoring, and measuring the performance of an 'Information Security Management System (ISMS)' based on ISO 27001
• Domain 6: Continuously improving an 'Information Security Management System (ISMS)' based on ISO 27001
• Domain 7: Preparation for an 'Information Security Management System (ISMS)' certification audit

ISO 27001

ISO 27001 is a certifiable standard that serves as a tool for the security and management of valuable data in an organization (information security). The standard specifies requirements for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving a documented information security management system (ISMS) in the context of the overall business risks to the organization. With an ISO 27001 certification, an organization also demonstrates that it takes the security of (customer) data seriously.

The training is a combination of theory and practice and is illustrated with examples based on real cases. To fully benefit from the various practical assignments, the number of participants per group is limited. You will complete the training immediately with the subsequent exam after which you can apply for the corresponding certification and title, depending on your experience, if you achieve a good result. Our trainers have extensive practical experience with ISO 27001 implementations in various sectors.