ISO/IEC 27001 Foundation: Information Security Management System

Foundation level: why that is the right starting point

This is a foundation course. It gives you the concepts and vocabulary of information security management without the depth required to implement or audit a full management system.

That is deliberately useful. An ISMS only works when the people around it (IT staff, process owners, managers approving exceptions) understand what it is asking of them.

Where to go next

If you need to implement or lead an audit of an information security management system, the ISO/IEC 27001 Lead Implementer and Lead Auditor courses build directly on this material.

What you will learn

• Describe information security management concepts and principles
• Explain the main ISO/IEC 27001 requirements for an information security management system
• Identify actions organisations can take to achieve conformity to ISO/IEC 27001
• Recognise how risk assessment and the statement of applicability fit into an ISMS

Course content

1. 1. Information security management fundamentals

   Core concepts, principles and the scope of an information security management system (ISMS).

2. 2. ISO/IEC 27001 requirements

   Clause-by-clause requirements, from context of the organisation through to improvement.

3. 3. Risk assessment and controls

   How an ISMS identifies and treats information security risk using ISO/IEC 27002 controls.

4. 4. Certification and continual improvement

   What the certification process involves and how an ISMS is expected to mature.

Exam and certification

Closed-book written exam delivered online through PECB Exams. Duration: 1 hour.

Your fee includes your first exam attempt and one free retake within 12 months. After passing, you can apply for the relevant PECB credential.