Upcoming dates

No public dates scheduled right now

This class runs as a private cohort on dates that suit your team, at your site or delivered live online. Tell us roughly when and how many people, and we'll come back with dates and a total.

We can also add you to the notify list for the next public date, though private delivery is usually faster and works out better per seat once you're past four or five people.

Request private dates

About this class

ISO/IEC 27001 Lead Implementer training course enables participants to acquire the knowledge necessary to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an information security management system (ISMS).

Information security threats and attacks increase and improve constantly. The best form of defense against them is the proper implementation and management of information security controls and best practices. Information security is also a key expectation and requirement of customers, legislators, and other interested parties.

This training course is designed to prepare participants in implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.

After attending the training course, you can take the exam. If you successfully pass it, you can apply for a “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement an ISMS based on the requirements of ISO/IEC 27001.

Certification and examination fees are included in the price of the training course.

What you'll be able to do

Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an implementer
Initiate and plan the implementation of an ISMS based on ISO/IEC 27001, by utilizing PECB’s IMS2 Methodology and other best practices
Support an organization in operating, maintaining, and continually improving an ISMS based on ISO/IEC 27001
Prepare an organization to undergo a third-party certification audit

Course outline

1 - Introduction to ISO/IEC 27001 and initiation of an ISMS

Training course objectives and structure
Standards and regulatory frameworks
Information Security Management System (ISMS)
Fundamental information security concepts and principles
Initiation of the ISMS implementation
Understanding the organization and its context
ISMS scope

2 - Planning the implementation of an ISMS

Leadership and project approval
Organizational structure
Analysis of the existing system
Information security policy
Risk management
Statement of Applicability

3 - Implementation of an ISMS

Documented information management
Selection and design of controls
Implementation of controls
Trends and technologies
Communication
Competence and awareness
Security operations management

4 - ISMS monitoring, continual improvement, and preparation for the certification audit

Monitoring, measurement, analysis, and evaluation
Internal audit
Management review
Treatment of nonconformities
Continual improvement
Preparing for the certification audit
Certification process and closing of the training course

5 - Certification Exam

Before you attend

The main requirement for participating in this training course is having a general knowledge of the ISMS concepts and ISO/IEC 27001.

Who this is for

Project managers and consultants involved in and concerned with the implementation of an ISMS Expert advisors seeking to master the implementation of an ISMS Individuals responsible for ensuring conformity to information security requirements within an organization Members of an ISMS implementation team