Information Security Management (ISO 27001)

Course overview

Information Security Management (ISO 27001) is an introduction that builds a solid working knowledge in Information Security Management (ISO 27001). It covers the principles, the requirements of ISO 27001, NIST CSF, ITIL 4 and COBIT 2019, and the practical methods used on site, with case studies from operations in the Gulf, Africa and worldwide. Available online, in the classroom in 60 cities, or in-house.

What participants will be able to do

• Explain the principles, terminology and scope of Information Security Management (ISO 27001)
• Apply the relevant requirements of ISO 27001, NIST CSF, ITIL 4 and COBIT 2019
• Use practical tools, checklists and calculations with confidence
• Recognise common problems, risks and root causes and choose the right corrective action
• Prepare an improvement plan for their own site or organisation

Who should attend

Designed for IT professionals, analysts, engineers and digital transformation teams, new joiners and anyone who needs a solid grounding in the subject.

Course outline (5 days)

1. Day 1: Principles and terminologyScope, key definitions and how Information Security Management (ISO 27001) fits into daily operations
2. Day 2: Codes, standards and requirementsWhat ISO 27001, NIST CSF, ITIL 4 and COBIT 2019 require, and how to read them
3. Day 3: Methods, tools and calculationsStep-by-step methods, checklists and worked examples
4. Day 4: Operation, inspection and common problemsTypical failures, warning signs and what to do about them
5. Day 5: Case studies, workshop and assessmentGroup exercise on real cases and a final knowledge check

What the 10-day edition adds

1. Day 6: Applied project, part 1Apply the week-one methods to a case from your organisation
2. Day 7: Data and digital toolsSoftware, spreadsheets and digital tools used in practice
3. Day 8: Lessons from incidents and auditsWhat investigations and audit findings teach
4. Day 9: Applied project, part 2Complete, test and refine your solution
5. Day 10: Presentations and final assessmentPresent to the group and complete the final assessment

Training method and certificate

Interactive sessions, practical exercises, case studies and pre- and post-course assessments. Participants receive a Qimma Global Training certificate of completion stating the training hours (30 hours for 5 days, 60 hours for 10 days). Delivered in English or Arabic.

Dates 2027–2030

None of these dates work? We run this course for your team on the date and in the place you choose.

Related courses

• QGT-ITD-129Information Security Management (ISO 27001): Advanced LevelAdvanced
• QGT-ITD-145Machine Learning with Python: Practical WorkshopPractical workshop
• QGT-ITD-150Information Security Management (ISO 27001): Practical WorkshopPractical workshop
• QGT-ITD-171Information Security Management (ISO 27001) MasterclassMasterclass
• QGT-ITD-182Big Data & Data Science MasterclassMasterclass