Information security is critically important to both you and your customers. BSI has developed a comprehensive one-day course that explores in depth all of the business implications of the International Standard for Information Security Management (ISO/IEC 27001).

Delegates learn about:

• Information security
• The purpose of the standard
• Control objectives and controls
• The importance of the most significant controls
• The implications of implementing ISO/IEC 27001 into an organisation
• The implications of certification and commercial pressures
• Penalties for non-compliance.

ISO 27001 information security management provides a controlled approach to protecting your organisation’s data. This five-day ISO 27001 Lead Implementer training course enables you to implement and successfully manage an Information Security Management System (ISMS) in your organisation.

You’ll gain the skills to lead the implementation of an efficient and effective system based on ISO/IEC 27001:2005. Days one to three of this course are identical to BSI’s Implementing ISO 27001 training course. Our experts will then guide you in applying this practically through policy writing, identifying risks and their impacts, establishing security controls and indentifying gaps. They will cover incident management, business continuity, security awareness and the certification process, making sure your implementation plan is a success.

Work with our first-class information security trainers to gain an internationally recognised qualification that enables you to lead the implementation process for your organisation. Become an ISO 27001 Lead implementer and set the highest standard of data protection.

Day 5 of this course features an exam and delegates who succesfully pass will receive a BSI Certificate of Achievement as an ISO/IEC 27001 Lead Implementer.  

Download full details on our ISO/IEC 27001:2005 Lead Implementer training course.

Recent high profile information security breaches and the value of information are highlighting the ever increasing need for organisations to protect their information. An Information Security Management System (ISMS) is a controlled approach to managing sensitive company information so that it remains secure. It encompasses people, processes and Information Management Security Systems.

The objective of this Information Security Management Implementation training course is to provide delegates with the necessary skills to implement an ISMS that is compliant with the requirements of ISO 17799 (recently renamed ISO 27002) and meets the certification requirements of ISO/IEC 27001. The course will provide delegates with a framework for implementation.

This course is identical to the first three days of our ISO 27001 Lead Implementer training course.

Download full details on our Implementing ISO/IEC 27001:2005 training course.

To provide guidance and practical experience in planning, executing, and reporting Information Security Management System Audits.

Information security is now recognized as an important business process which if not managed correctly and efficiently may impact upon an organizations ability to deliver its products and services to their customers. Just as important lack of security has the potential to impact upon revenues. The highly specialised skills and practical knowledge needed to assess an organisations capability in managing all aspects of information security is one that can be learnt.

This innovative two-day course provides a solid foundation in all aspects of the audit process. Stage by stage delegates are taken through a structured programme that includes a balance of theory and practice using a combination of workshops and practical exercises enabling delegates to gain an understanding of the key activities for auditing.

Auditing is crucial to the success of any management system. As a result, it carries with it heavy responsibilities, tough challenges and complex problems. This five day intensive course prepares delegates for the qualification process for ISO 27001:2005 and trains them on how to plan, manage and implement the audit programme. It also empowers them to give practical help and information to those who are working towards compliance and certification.

IRCA Certified course (A17287)

This course is registered by the governing board of the IQA - International Register of Certified Auditors (IRCA) and meets the training requirements of those seeking registration as a lead auditor under that scheme.

"As a leader of a large ISO certification program, I found the ISO/IEC 27001 Lead Auditor course offered immense benefits across multiple dimensions including course content, industry experience and auditing techniques. The course content is designed not only to deliver knowledge, but offers an experience through a comprehensive and collaborative program. The course delivered by experienced trainers amplified this experience enabling participants to develop and enhance their auditing skills." Michael Markarian, Asia-Pacific Regional Quality Manager, Hewlett-Packard Enterprise Services