ISO/IEC 27001 – ISMS Lead Implementer

  • Overview: This certification focuses on developing the skills necessary to implement and manage an ISMS as specified in ISO/IEC 27001.
  • Target Audiences: Information security managers, consultants, and IT professionals involved in ISMS implementation.
  • Prerequisites: Knowledge of ISO/IEC 27001 standards and completion of the ISO 27001 Foundation course is recommended.
  • Course Content:
    • Planning the ISMS Implementation:
      • Defining the ISMS scope and objectives.
      • Developing an ISMS implementation plan.
      • Identifying resource requirements and allocating resources.
      • Establishing an information security policy framework.
    • Risk Management and Assessment:
      • Conducting detailed risk assessments in line with ISO 27001.
      • Identifying and evaluating risks to information security.
      • Selecting appropriate risk treatment options.
      • Implementing risk management processes within the ISMS.
    • Implementation of ISMS Policies:
      • Developing and implementing ISMS policies and procedures.
      • Establishing information security objectives and controls.
      • Managing ISMS documentation and records.
      • Implementing security controls in line with ISO 27001 Annex A.
    • Continual Improvement and Management Review:
      • Establishing a process for continual improvement of the ISMS.
      • Conducting management reviews to evaluate ISMS performance.
      • Implementing corrective and preventive actions.
      • Preparing for ISO 27001 certification audits.
  • Exam Details:
    • 80 multiple-choice questions
    • 2-hour duration
    • Passing score: 70%
  • Price: Approximately $900 USD for the exam; training costs typically range from $2,000 to $3,500 USD.