27001 Information Security Management System Assessment Micro-Lab

A guided micro-lab for leaders and practitioners to learn
how to determine what the organization needs
to govern and manage information security risk.

Your organization depends on information to conduct business, serve customers, manage operations, and maintain relationships with employees, suppliers, and other interested parties. The loss of confidentiality, integrity, or availability can disrupt operations, expose sensitive information, and undermine the trust on which the organization depends.

Information security changes more than an organization’s technology. It affects business priorities, responsibilities, operating practices, regulatory and contractual obligations, and the decisions leaders make about risk. Your organization may already have security controls in place. That does not mean those controls address the right risks, operate effectively, or produce the evidence needed to demonstrate compliance.

Does your organization have what it takes to establish, operate, and continually improve an effective information security management system? Can customers, regulators, and business leaders trust how your organization manages information security risk? Use Certified Information Security’s ISO/IEC 27001 assessment platform to find out.

Get hands-on experience with the Assessment System

This is not just a lecture or a standards overview. You will work directly in the Multi-Framework Assessment System by Certified Information Security using a guided demonstration scenario and learn to:

• navigate ISO/IEC 27001 Clauses 4 through 10 and the Annex A reference controls;
• examine a representative ISO/IEC 27001 requirement or control and identify the organizational practices and evidence relevant to it;
• understand how information security risks, necessary controls, and the Statement of Applicability are connected;
• distinguish an established information security management practice from an unsupported assumption;
• learn how to record and report an initial assessment conclusion;
• explore how the system facilitates cross-functional collaboration and prepares information for review, challenge, and follow-up;
• learn how assessment results can be used to establish a carefully measured roadmap for improving the organization’s information security management system; and
• see how the system can produce a professional, agency-quality report of the organization’s current information security management capability and readiness.
• Complete the micro-lab to receive a certificate of completion and earn 1 CPE credit.

The micro-lab demonstrates the nature, structure, and scale of professional assessment work. It does not claim to complete that work or replace the training required to perform it.

How this fits into the bigger picture of information security management

ISO/IEC 27001 requires the organization to establish, operate, and continually improve an Information Security Management System anchored in its broader enterprise risk strategy.

Use Certified Information Security’s ISO/IEC 27001 assessment platform to see what your organization must be prepared to demonstrate. See what a credible, evidence-supported assessment requires and why trained practitioners and auditors are essential to effective information security governance, risk management, compliance assessment, and reporting.

Seating is limited. Reserve your seat now for the ISO 27001 ISMS assessment micro-lab.