Cybersecurity
Cybersecurity Fundamentals
Protect systems and data. Learn core security concepts, common threats, and defenses every professional and business needs…
USD 89
Information Security Management (ISO 27001)
Plan, build and run an information security management system that follows ISO/IEC 27001, and prepare an organisation for a certification audit.
About this course
Build a security program. Understand ISO 27001, risk assessment, controls, and policies to protect information across an organization.
What you will learn
- Explain what an information security management system is and how the clauses of ISO/IEC 27001 fit together
- Define a realistic ISMS scope and identify the interested parties, assets and boundaries it covers
- Carry out a repeatable risk assessment and choose treatment options with named risk owners
- Produce a Statement of Applicability that justifies every Annex A control decision
- Write and maintain the core policies, procedures and records an auditor expects to see
- Plan internal audits and management reviews and run a gap analysis against the standard
Curriculum
Module 1ISMS Foundations4 lessons
- 1What an ISMS Is and Why It Matters Free preview
- 2ISO 27001 Structure and Clauses
- 3Risk-Based Thinking
- 4Leadership and Governance
- QModule quiz (4 questions)
Module 2Building the ISMS4 lessons
- 5Scoping Your ISMS
- 6Risk Assessment Methodology
- 7Statement of Applicability
- 8Policies and Documentation
- QModule quiz (4 questions)
Module 3Controls in Practice4 lessons
- 9Annex A Control Domains Tour
- 10Access Control and Cryptography Controls
- 11Operations and Communications Security
- 12Supplier and HR Security
- QModule quiz (4 questions)
Module 4Certification Journey4 lessons
- 13Internal Audits
- 14Management Reviews and Improvement
- 15The Certification Audit Process
- 16Course Project: Gap Analysis
- QModule quiz (4 questions)
PFinal project: ISO 27001 Gap Analysis and Implementation Roadmap
Who this course is for
- Managers, compliance officers and IT staff asked to lead or support an ISO 27001 project
- Owners of fintechs, SaaS firms and service businesses whose clients or regulators ask for evidence of security
- Security and audit beginners who want a structured, management-level view of information security
Requirements
- A computer with a word processor and spreadsheet application
- Basic familiarity with how an organisation uses computers, email and cloud services; no technical security background needed
- Optional but helpful: access to a copy of ISO/IEC 27001:2022, purchased from ISO or your national standards body
What is included
Written lessons
16 lessons, each with a practical exercise and key points to remember.
Module quizzes
A short quiz at the end of each module. Pass mark 70%, and you can retake it.
Final project
ISO 27001 Gap Analysis and Implementation Roadmap. A practical brief with steps and a way to check your own work.
Certificate
A certificate of completion from EMFAD Courses with a unique code anyone can verify.
How the certificate works
Complete every lesson and pass every module quiz with 70% or more. Your certificate then appears in your learner area, ready to print or save as PDF. It shows your name, the course title, the completion date and a unique code. It is a certificate of completion from EMFAD Courses, not an accredited qualification.
More in Cybersecurity
All →Cybersecurity
Digital Forensics Introduction
Investigate security incidents. Learn evidence collection, analysis, and reporting to trace and understand digital attacks.
USD 39
Cybersecurity
Identity and Access Management
Control who accesses what. Master authentication, authorization, single sign-on, and least-privilege to secure users and…
USD 39