Advanced

ISO 27001 Implementation & Auditing

Lead your organisation through ISO 27001 with confidence — as implementer or auditor.

Programme Overview

A rigorous programme preparing learners to design, implement, and audit ISO 27001-aligned Information Security Management Systems. Covers the full ISO/IEC 27001 standard, Annex A controls, implementation planning, and the audit process end to end. Aligned with Lead Implementer and Lead Auditor competency requirements.

What You'll Learn

Design an ISMS aligned with ISO/IEC 27001:2022
Implement and operate Annex A controls
Plan and execute internal and external audits
Prepare an organisation for certification

Who It's For

Information security managers
GRC professionals
Internal auditors and compliance leaders

Prerequisites

Prior experience with information security concepts
Familiarity with management-system thinking helpful but not required

Curriculum

- Purpose and structure of ISO/IEC 27001
- Context, leadership, planning clauses
- Risk management requirements
- Organisational, people, physical, and technological controls
- Statement of Applicability
- Control operating effectiveness
- Scoping, gap analysis, and roadmap
- Documentation strategy
- Running the ISMS day-to-day
- Audit programme design
- Evidence-gathering techniques
- Non-conformity and corrective action
- Stage 1 and Stage 2 audit expectations
- Management review and measurement
- Mock audit exercises