# ISO/IEC 27001 Lead Implementer (training course)

> Plan, build and run an ISMS from scope to certification.

URL: https://securei3.com/training/iso-27001-lead-implementer/
Level: Implementer
Duration: 5 days
Formats: Virtual instructor-led, In-house
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube

## Who should attend

- ISMS managers and project leads
- Security and IT managers
- Consultants

## Learning outcomes

- Scope and plan an ISMS
- Run a risk assessment and build a Statement of Applicability
- Implement and monitor controls
- Prepare for certification

## Overview

This intensive five-day course gives you the knowledge and practical skills to plan, implement, manage and maintain an information security management system based on ISO/IEC 27001:2022. Through lectures, worked examples and a running case study, you build each element of an ISMS, from scope and risk assessment to the Statement of Applicability, monitoring and certification readiness.

## Why attend

- Lead an ISO/IEC 27001 project with confidence from start to certificate
- Learn a risk methodology you can apply immediately
- Understand how the 2022 controls map to SOC 2, NIST CSF and local regulations
- Gain templates and checklists used in real implementations
- Prepare for the role of ISMS manager or implementation consultant

## Agenda

### Day 1: Introduction to ISO/IEC 27001 and initiating an ISMS
- Standards and regulatory frameworks
- Fundamental concepts of information security
- The ISMS and the Plan-Do-Check-Act cycle
- Initiating the implementation: business case and leadership commitment
- Understanding the organisation and its context
- Defining the ISMS scope

### Day 2: Planning the ISMS
- Information security policy and objectives
- Roles, responsibilities and governance
- Information security risk assessment methodology (ISO/IEC 27005)
- Risk identification, analysis and evaluation
- Risk treatment and the risk treatment plan
- The Statement of Applicability

### Day 3: Implementing the ISMS
- Documented information and document control
- Selecting and designing Annex A controls
- Organisational, people, physical and technological controls
- Supplier and cloud security
- Competence, awareness and communication
- Incident management and business continuity aspects

### Day 4: Monitoring, measurement and continual improvement
- Monitoring, measurement and metrics
- Internal audit programme
- Management review
- Nonconformity and corrective action
- Continual improvement
- Preparing for the certification audit: Stage 1 and Stage 2

### Day 5: Case study review and assessment
- Review of the course case study
- Transitioning and integrating with other management systems
- Questions and exam preparation
- Written assessment

Prerequisites: A basic understanding of information security concepts. Experience in IT, risk or compliance is helpful but not required.
Assessment: Written assessment. A scenario-based written assessment on the final day, open book, covering the requirements and their practical application. Pass mark 70%. Participants who pass receive a certificate of achievement; others receive a certificate of attendance.
CPD hours: 35

Included:
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions

## Frequently asked questions

### Do I need to pass the assessment to receive a certificate?

Participants who pass receive a certificate of achievement. Everyone who attends the full course receives a certificate of attendance.

### How are virtual sessions run?

Live, instructor-led sessions on Microsoft Teams or Zoom, with breakout rooms for exercises, the same materials as the classroom and short breaks every 90 minutes. You need a stable internet connection and a webcam.

### Can this course be run for our team only?

Yes. We deliver it privately, online or at your premises, and use examples from your own systems. In-house delivery is usually more cost-effective for six or more participants.

### How much does it cost?

Fees depend on format, location and group size. Send an enquiry and we will reply with dates and a quote within one working day.


Enquire: https://securei3.com/training/iso-27001-lead-implementer/#enquire