Certification ISO 27001:2022

Against a backdrop of evolving threats, increased reliance on information assets, and strengthened statutory, regulatory and contractual obligations, information security is a key consideration for governance, risk management and organisational resilience.

ISO/IEC 27001:2022 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). It is based on a risk-based approach intended to preserve the confidentiality, integrity and availability of information, considering the organisation’s context and the needs and expectations of relevant interested parties.

This certification pathway is designed to support information security managers, information systems managers, risk and compliance functions, internal auditors, quality managers, legal advisers, data protection officers and support functions in understanding, implementing and evaluating an ISMS that conforms to the requirements of ISO/IEC 27001:2022.

Through a progressive approach, participants will examine the requirements relating to the context of the organisation, leadership, planning, support, operation, performance evaluation and improvement. They will also address information security risk assessment and treatment, the Statement of Applicability, information security objectives, control of documented information and the selection of relevant information security controls.

They will learn how to determine the scope of the ISMS, identify relevant interested parties, define risk criteria, assess risks, establish a risk treatment plan, evaluate the effectiveness of implemented controls and prepare audits based on objective evidence.

At the end of the training, participants will be able to: 

• Understand the principles, structure and requirements of ISO/IEC 27001:2022 applicable to an ISMS.

• Determine the context, relevant interested parties, scope and processes required for the ISMS.

• Implement an information security risk assessment and treatment process, supported by defined criteria and a Statement of Applicability.

• Establish measurable objectives, responsibilities, indicators and monitoring arrangements to evaluate the performance and effectiveness of the ISMS.

• Prepare, conduct and document an ISMS audit using an approach based on risks, applicable requirements and objective evidence.

• ISO 27001:2022 - Foundation : Information Security Management System
  

• ISO 27001:2022 - Audit : Information Security Management System
  

Upon completion of this pathway, participants will have the methodological and operational knowledge required to contribute to the establishment, implementation, maintenance, auditing and continual improvement of an ISMS that conforms to ISO/IEC 27001:2022, incorporating applicable requirements, the risk-based approach and evaluation of the effectiveness of information security controls.  

At the end of the training, participants will be required to take an exam. The exam will be sent electronically by the House of Training, and participants will have a specific timeframe to complete it online using a computer.

A minimum score of 60% is required to pass the exam, and participants must have attended at least 80% of the training to be eligible to take the exam.

The course concludes with a examination. Participants who successfully pass the examination will receive a certificate issued by the House of Training.