ISO 27001 Lead Auditor information security management 

Get a thorough understanding of ISO 27000 standards for information security governance, and how to leverage the ISO 27000 standards to establish and maintain an information security management system (ISMS) program.

Build-out the initial ISO-conforming information security program policy right in class!

ISO 27001 specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented Information Security program within the context of the organization's overall business risks. It specifies requirements for the implementation of security controls customized to the needs of individual organizations.

Designed to follow our 3-day ISO 31000 Enterprise Risk Management program, this 2-day ISO 27001 training and certification workshop continues our information security risk assessment training to provide thorough coverage of the ISO 27000 standards, as well as setting out advice on the implementation of an information security initiative. The purpose of the course is to:

Recommended Attendance by Position

Recommended participants by role for this training include:

• Organizational Leadership (e.g., Director, Chief Operations Officer, Chief Technology Officer, Chief Security Officer)
• Chief Privacy Officer
• Data Protection Officer
• Risk Management (e.g., Enterprise/Operations Risk Manager)
• Chief Audit Executive/Director of Internal Audit
• Chief Compliance Officer & Compliance Managers
• IT Policy and Governance (e.g., Chief Information Security Officer)
• Business Operations (e.g., Operations Manager)
• IT Security Planning and Management (e.g., Director of Information Technology)
• Business Continuity and Disaster Recovery Planning (e.g., BC/DR Manager)
• IT Infrastructure (e.g., Network/System Administrator)
• IT Operations (e.g., Configuration/Change Managers)
• Procurement and Vendor Management (e.g., Contracts and Legal Support Managers)

Online ISO 27001 Lead Implementer Certification Program

1. Information Security and ISO 27000 Standards
   • Principles of information security
   • Review of ISO 27001, ISO 27002, ISO 27003, ISO 27005, ISO 27007, and ISO 27008
   • Achieving the benefits of information security
2. Managing InfoSec
   • Planning and designing
   • Implementing and benchmarking
   • Measuring and monitoring
   • Learning and reporting
3. Establish a firm program starting point by using ISO 27000 standards to build out the initial information security core policy. Throughout the class, our expert instructor will convert ISO 27000 series concepts and requirements into a real ISO 27001 InfoSec Policy. Bring your laptop, and you can work right along with the instructor using electronic (MS Word format) templates we provide in class!* Along with the instructor, you will get your information security program properly initiated by constructing:
   • Information Security Policy Statement
   • General Terms and Definitions
   • Scope Document
   • Strategy Statement including identification of requirements for the Information Security program setup, initiation, operation, maintenance, and improvement
   • Organizational Roles and Responsibilities Statement
   • Risk Policy

* ISO Standards are NOT included in this course, nor provided in class. Students are encouraged to bring their own hard-copies of the standards to the class. ISO standards are available for purchase at www.iso.org.

Professional Certification: This course partially fulfills prerequisite training requirements for the certification exam #ISMS101 required for these professional ISO credentials:

Our simple guarantee to you.

Preparing for Certified Information Security's professional certification exams #ISMS101, #ISMS102, and #ISMS103 is serious business.

This is where we can help you. If you first successfully complete:

• All prerequisite ISO 27001 certification training; and
• All RM101, ISMS101, ISMS102, and ISMS103 online practice exams

Certified Information Security guarantees your success in passing certification exams  #ISMS101, and #ISMS102.

If you do not pass exams #ISMS101, #ISMS102, and #ISMS103 on your first attempt after completion of your required training and practice exams, Certified Information Security will allow you to re-test at no additional charge until you successfully pass your certification exams.

It’s convenient!

Certified Information Security provides the training and credentialing you need to become recognized as an authority in information security governance and risk management.  You choose the method of delivery: online through our secure website, or in-person at a publicly available course or privately at your facility.  We take care of the rest – from administration, to record keeping, to providing certificates of completion and certification.

Online students have the additional convenience of taking courses whenever they want without the need to travel or disrupt their busy schedules. Our program allows users to start and stop without losing their place or data.  Learning and certifying expertise has never been so easy!

How to get started - two alternatives 

1. If your employer is paying for your training and certification, we recommend purchasing a complete ISO 27001 Lead Implementer certification package voucher that includes all required resources, including membership in the CIS Body of Certified Professionals, all required training programs, all recommended practice exams, and the required certification exam. This allows your employer to purchase and pay all of your necessary resources at once, while still giving you flexibility of when to use your training, practice exams, and certification exams later.
   
   

2. "Pay-as-you-go" by purchasing your membership in the CIS Body of Certified Professionals, training, recommended practice exams, and the certification exams as you need them. Start by purchasing training, and then purchase practice exams when you are ready. After you complete your practice exams, you then purchase your certification exam.

A breakdown of the costs are as follows: 

1. Required CIS Membership Application Fee & Membership Dues: $100.00 Learn more

2. Required Training 

3. Optional Online Practice Exams for all exams (RM101 and ISMS101): $150.00 Learn more

4. Required Online Certification Exams (RM101 and ISMS101): $200.00 Learn more