Certified ISO 27001 Lead Implementer Training Course

The Information Security Leadership Forums' Certified ISO 27001 Lead Implementer Course is a 5-day information packed learning experience. Check out the course overview video, day-by-day course curriculum, and more details on this page.

Enrollment for our next available

Certified ISO 27001 Lead Implementer Course

scheduled for October 9 - 13, 2023

closes at 5:00 PM (US Eastern Time Zone) on October 5, 2023

Days

Hours

Minutes

Seconds

Before Registration Closes

Who Should Take This Course?

Information Security professionals and managers involved in any aspect of the development, roll-out or operational maintenance of an Information Security Management System (ISMS)
IT Managers and professionals wanting to prepare and to support an organization in the implementation or maintenance of an Information Security Management System (ISMS)
Auditors who want to understand and be able to demonstrate competence in an Information Security Management System implementation
Project Managers and Consultants looking to understand and support clients implementing an information security management system
Corporate / industrial / physical security specialists looking to understand the dynamics of an information security program and their role in supporting it
Technical IT specialist wanting to prepare for an Information Security function or for an ISMS project management function
Data Privacy, compliance managers and specialists charged with the responsibility for information security conformity in an organization in a regulated or service industry

How Does The ISO 27001 Lead Implementer Course Relate to Me?

Select the role below that best suite your situation

Disclaimer: these are not customer testimonials, but rather stories of real companies and situations to help you appreciate how this course may be seen or affect people in different roles. Names and details have been altered for privacy reasons.

IT Staff & Consultants

Business Leaders

Schedule, Registration, and Cost

For specific dates and locations, please visit the Event Calendar view, or our Scheduled Events page.

Forum members receive an automatic $500 discount during check out off the list price as follows:

Live Online - Regular Price $2,495 to $1,995

In Person - Regular Price $2,995 to $2,495.

Non-members are welcome to register at the standard list price noted in grey above

NOTES:

1. On-site Training Class Availability is Subject To - No Local Pandemic or Protest / Rioting Restrictions. Where Restrictions Are In Place, The Course will Revert to Live Online.

2. If an early registration or special discount has been offered for a course, but is no longer visible on the course registration page, then the offer has expired and is no longer available to redeem.

3. Member discounts are not stackable with non-member discount offers.

Click to see scheduled courses

Agenda

Day One - Introduction and Planning for an Information Security Management System (ISMS)

Course introduction
A primer on the ISO 27000 family of standards and guides
An ISO 27001 ISMS
Acclimating to the organization
Business Process Mapping
Performing an Asset Inventory to support a risk assessment
Defining ISMS Program Goals & Priorities
Defining the scope of the ISMS

Day Two - Planning for an ISMS and Risk Management

Understanding and building a Business Case for an ISMS
Understanding the requirement for, and performing the mandatory legal & regulatory review
Understanding the mandatory Statement of Applicability, and how to create one
Fundamental of a risk assessment
Familiarization with and understanding how to perform a Gap and Impact Assessments, and prepare the mitigation plan
Understanding the need for an ISMS Program Charter Development and familiarization on how to build one
Understanding a practical approach to developing governance for your ISMS, including Information Security Policy, Policy
Standards, Technical Security Operating Standards, and Technical Security Configuration Standards

Day Three - Develop and Implement ISMS

ISMS Governance continued with Standard Security Operating Processes, and Technical Security Operating Directives (procedures)
Performance Management
Communications Program
Mitigation Plan Implementation
Operational Transfer and Acceptance

Day Four - Management Oversight, Auditing and Managing an ISMS based on ISO 27001

A walk through of the ISO 27001 Annex A Control Objectives & Controls
Understanding the mandatory requirement for an independent security assessment
How to develop an Internal Audit program to support an ISMS
Understanding the requirements for an ISMS Leadership Review, including direction for continuous improvement
Understanding the end-to-end ISMS certification process, including the certification audit and its requirements
Understanding the standard's requirement for the establishment and ongoing management of Information Security Incident with an ISMS

Day Five - Practical & Written Certification Exams

Morning: 3 hour written exam
Afternoon: Practical Exam - Formal Presentation of ISMS Business Case to the Organization's Board of Directors

NOTES:

1. Both written and practical exams are mandatory, in order to meet the certification requirements set out by the Information Security Leadership Forum, this course's certifying body.

2. Formal business attire is mandatory for you practical exam. Please be sure to pack / dress appropriately. Men are required to wear a jacket and tie, and women the equivalent.

Learning Objectives

When designing our Certified ISO 27001 Lead Implementer Course, great care is taken to identify key areas the course must focus on in order to ensure student achieve the goals the course was setup to accomplish. These learning objectives are highlighted as follows:

Climbers team on peak. Sport and active life concept

Understand the application of an Information Security Program as prescribed by ISO 27001.

Master the concepts, approaches, standards, methods and techniques required for the effective management of an organizational Information Security Program

Familiarity with the various sub-programs under an Information Security Program, and their interrelationships to establish a holistic enterprise information security program.

Develop the expertise to lead an organization in the design, development, implementation, management and maintenance of an Information Security Program

Familiarity with the subject matter experts and stakeholders that need to be engaged, and how to apply their expertise to support an organization in the establishment of an Information Security Management System

Develop fundamental knowledge and skills required to manage a team that is implementing the ISO27001 standard

What You Get!

What each student will receive

a copy of all slides presented during the class
a certificate of completion awarding 35 Continuing Professional Development (CDP) credit hours
An exam and certification application voucher.

Certification Exam Information

What you need to know

There are two exams for this course, a practical and a written exam. Students are required to achieve a minimum passing grade in both in order to qualify for certification.
The written exam is completed within 3 hours on Friday morning, and is in a multiple choice format. The exam begins punctually at 9:00 AM and ends at 12:00 PM. As such, students must arrive no later than 8:30 AM, at which time the examination facilitator will be read exam instructions to the class, and students may ask any final questions. This exam is an open book exam.
The practical exam is completed Friday afternoon with a live presentation to a panel of guest executives (CISO, CIO, CFO, COO, CEO, etc.).
All students are required to sign a non-disclosure agreement prior to commencement of the exam, attesting they will not disclose or discuss anything related to either the practical or written exams with any other person(s).
Students must bring (1) a copy of their student registration, and (2) at least one state / provincial or federal government issued photo identification card, both of which must be presented upon entering the examination room. Entrance will not be permitted without both.

Special Notes

When offered as an on-site course, the ISLF reserves the right to revert any course to Live Online Only, in instances where pandemic or civil unrest prevail, making it unsafe or unlawful to physically be on premises. In such instances, registered student will be notified with as much advanced notice as possible.
Students must understand that they are required to participate in the entire training course to be eligible to write the certification exam.
Student are prohibited from recording (audio or video) any session(s), or portions of any session, no matter whether the student is attending a classroom-based or online version.
All student material for this course will be provided on or before the first day of training, by the course instructor via the Information Security Leadership Forum's Online Training Portal. All course material is copyright protected, and student are prohibited from making any unauthorized electronic or printed copies, or redistributing to any person or entity.
Student are required to sign a non-compete clause, stating they will not take this course and use the material to create a competing training offering, nor support or participate with any other entity to create and offer a similar commercial fee-based or free offering
Students must bring with them or otherwise have readily accessible, a copy of their course registration with barcode (printed or electronic format), which will be used to take daily attendance on the course. Anyone failing to have this information may be refused access.
Students understand that they are individually required to comply with any and all government regulations and restrictions or those imposed by an event venue that are in place, or may be imposed within the jurisdiction where this training is scheduled to take place as it relates to non-resident visa, pandemic outbreaks, protests or other emergency situations.
The Information Security Leadership Forum, CIMA, affiliate training delivery partners, and venue organizations and their staff, shall not be responsible to provision or assist in the provisioning of any item to assist a student to register or participate in training with us, for compliance with any government imposed requirements i.e. COVID-19 PPE, etc. All students are required to plan for and bring with them, or make arrangements for the provisioning of any and all items that may be required for such situations e.g. facial mask, evidence of virus testing, non-resident visa, etc.
Training seats are limited, and we do not maintain a waiting list for courses as they book up fast. As such, registration may be closed before the above time, when fully booked.
Registration closes at 5:00 PM (US Eastern) on the Thursday, 1 week before the first day of each course, to allow time for us to send electronic versions of course-ware and mandatory communications to each student. The final registration date for each course is posted on the respective course registration page.

Disclosure

Certification training hosted by the Information Security Leadership Forum, is developed, maintained and delivered by the Center for Information Management and Assurance, the Forum's official certification training partner.