Professional skills

ISO/IEC 27001

Name: ISO/IEC 27001
Price: 2800.00 USD
Availability: InStock

3-day course to understand ISO/IEC 27001: build ISMS artefacts, map Annex A controls, and practise audit activities with case-based exam prep.

24 hours (3 days) Foundation to Practitioner APMG Certifications

View training options Download curriculum ↓

THE BIG PICTURE

About this course

ISO/IEC 27001 is the international standard for establishing, implementing, maintaining and continually improving an Information Security Management System. APMG International awards related certifications at Foundation, Practitioner and Auditor levels for professionals working with ISMS programmes. Across three days you examine clauses 4–10 and the Annex A control set from the 2022 edition, using a realistic case study. You will draft an ISMS scope and context analysis, define risk criteria, create a risk register, build a Statement of Applicability, develop control implementation plans, and plan and conduct parts of an internal audit with findings and corrective actions. You can choose to sit the APMG International ISO/IEC 27001 Foundation, Practitioner or Auditor exams. Exams are booked directly with APMG International or an Accredited Training Organisation. The exact format, duration, pass mark and booking options are published by APMG International; guidance on routes and scheduling is provided during the course. APMG International owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.

What you’ll learn

Explain ISO/IEC 27001:2022 structure, terminology and intent
Define ISMS scope and analyse organisational context and interested parties
Set risk criteria, perform information security risk assessment and plan risk treatment
Map risks to Annex A controls and compile a justified Statement of Applicability
Plan ISMS support, operation, monitoring, measurement and management review
Plan and perform an internal ISMS audit and write clear nonconformity statements
Describe the external certification journey (Stage 1, Stage 2 and surveillance)
Practise exam-style questions and build a personal study plan for the selected APMG exam

A CLEAR PATH FORWARD

3-day ISO/IEC 27001 agenda

3 days · 24 contact hours · 09:00–17:30

3 instructor-led days (24 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.

Learning route: 3 recommended days
Practical work: 3 guided activities
Finish with: Mock exam + certification exam

Take a look at each day. Open a section to see the topics and practical work.

Day 1ISMS foundations and planningISMS principles, context, leadership, planning and risk

What we’ll cover

09:00–09:30 · Introductions, objectives, and overview of ISO/IEC 27001:2022
09:30–10:30 · ISMS concepts, terms, and the certification landscape
10:45–12:15 · Clause 4: Context of the organisation and defining ISMS scope
13:15–14:15 · Clause 5: Leadership, roles, responsibilities and policy workshop
14:15–15:00 · Clause 6: Objectives, planning and establishing risk criteria
15:15–16:00 · Risk assessment and risk treatment methodology (clause 6.1)
16:00–17:00 · Exam-style practice questions: foundations and planning
17:00–17:30 · Daily review and takeaways

Put it into practice

Draft the ISMS scope and context analysis for a case-study organisation, identifying interested parties and requirements. Establish risk criteria and start a risk register with sample assets, threats and impacts.

You’ll take away
Draft ISMS scope, context summary and risk register template

Day 2Controls and implementationSupport, operation, Annex A controls and Statement of Applicability

What we’ll cover

09:00–09:30 · Recap and Q&A from Day 1
09:30–10:30 · Clause 7: Support (resources, competence, awareness, communication, documented information)
10:45–11:45 · Clause 8: Operation and change control
11:45–12:30 · Annex A overview and control selection principles
13:30–14:30 · Organisational and people controls: examples and mapping to risks
14:30–15:15 · Physical and technological controls: examples and mapping to risks
15:30–16:15 · Building and maintaining the Statement of Applicability
16:15–17:00 · Exam-style practice questions: controls and implementation
17:00–17:30 · Daily review and preparation for Day 3

Put it into practice

Create a Statement of Applicability that justifies selected controls against identified risks. Produce a simple control implementation plan with owners, priorities and evidence expectations.

You’ll take away
Completed SoA draft and control implementation plan outline

Day 3Audit, performance and improvementPerformance evaluation, internal audit, improvement and certification journey

What we’ll cover

09:00–09:30 · Recap and Q&A from Day 2
09:30–10:30 · Clause 9: Monitoring, measurement, analysis, internal audit and management review
10:45–11:45 · ISO 19011 audit principles and building an audit programme
11:45–12:30 · Conducting an internal audit: checklists, sampling and evidence
13:30–14:15 · Clause 10: Nonconformities, corrective action and continual improvement
14:15–15:00 · Writing clear nonconformity statements and corrective actions
15:15–16:00 · Certification pathway: readiness, Stage 1/Stage 2 and surveillance
16:00–17:00 · Mock exam and debrief for Foundation/Practitioner/Auditor tracks
17:00–17:30 · Exam booking guidance and personal study plan

Put it into practice

Plan and run a mini internal audit of the case-study ISMS area, recording objective evidence. Draft two nonconformity statements and propose corrective actions.

You’ll take away
Audit checklist and sample internal audit report with findings

Bring it all together

Certification exam: ISO/IEC 27001, awarded by APMG International. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 24 contact hours.

Sample MindClick certificate of completion for ISO/IEC 27001, marked SAMPLE — What you receive
You earn two separate credentials. The sample shows the MindClick training certificate.
MindClick certificate of completion: 3 days, 24 contact hours, issued to every attendee who completes the course.
ISO/IEC 27001: issued by APMG International when you meet its requirements and pass the exam.

Before you choose your learning route

Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.

APMG International owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of APMG International.

APMG International – ISO/IEC 27001 ↗

Fees

Fee per learner outside India. Exam fee included.
Delivery format	Fee per learner	Exam fee
Live online	$2,800 USD	Included
Classroom	$4,500 USD	Included

One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.

Prerequisites

No formal prerequisites for the Foundation level. Prior ISMS knowledge is recommended for Practitioner, and audit/risk experience is recommended for Auditor. Please bring a laptop (office apps enabled) and a photo ID for exam booking.

Who is this course for?

Internal managers and personnel working to implement, maintain and operate an ISMS within an organization.
External consultants supporting an organization’s implementation, maintenance and operation of an ISMS.
Internal auditors who are required to have an applied knowledge of the standard.
IT professionals including security, analysts, and auditors.
Anyone interested in effective information security management systems (ISMS).

FIND YOUR START

Confirmed batch starts

Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.

Choose your country & month

Nov152026

Confirmed by MindClickLive onlineWeekday start