Information Security
ISO/IEC 27001 — Information Security Management System
Levels available
Course types, duration & fees
| Course type | Who should attend | What your company benefits | Duration | Fee |
|---|---|---|---|---|
| Foundation | Those who wish to learn the basis of implementing the management system and its processes | Provide the organization with best-practice based orientation and mindset culture by understanding the main important elements of ISO standards | 2 days | HKD 4,400 |
| Lead Implementer | Responsible persons for implementing and managing the management system in their company | Improve overall processes by implementing best practices led by competent staff that can lead to compliance with ISO standards | 5 days | HKD 11,200 |
| Lead Auditor | Responsible persons for auditing and monitoring management systems in their company | Ensure your management systems are implemented properly by having competent staff audit the processes that can lead to a successful compliance and certification | 5 days | HKD 11,200 |
About the standard
ISO/IEC 27001 is the international standard for Information Security Management Systems (ISMS), setting out how to preserve the confidentiality, integrity, and availability of information through a risk management process. Organizations that implement an ISMS compliant with ISO/IEC 27001 can systematically assess and treat the information security risks they face. The 2022 revision restructured Annex A's controls into four themes — organizational, people, physical, and technological — reducing the count from 114 to 93 controls and broadening the standard's scope to explicitly cover cybersecurity and privacy protection alongside information security.
Levels available
- Foundation — Introduces the core concepts of an ISMS and ISO/IEC 27001's requirements, giving learners a solid grounding in information security management.
- Lead Implementer — For those responsible for implementing and managing an ISMS, covering the skills to build information security policies and procedures tailored to an organization's needs.
- Lead Auditor — For those responsible for auditing an ISMS, developing the competence to assess conformity and support certification.
- Transition — For professionals already certified against a prior edition of the standard who need to update their credential to the current 2022 version.
Who should attend
This track suits information security managers, IT professionals, risk and compliance officers, and anyone responsible for protecting an organization's information assets. It's equally relevant to internal and external auditors who need to assess an ISMS against ISO/IEC 27001's requirements.
Learning objectives
- Understand the requirements of ISO/IEC 27001 for establishing and maintaining an ISMS
- Learn to support an organization in implementing information security policies and procedures tailored to its needs
- Gain the competence to integrate an ISMS into an organization's wider processes
- Understand the risk assessment and risk treatment process central to ISO/IEC 27001
- Learn how to apply the four categories of Annex A controls: organizational, people, physical, and technological
Why attend
Information security threats keep growing in scale and sophistication, making a certified ISMS a competitive necessity rather than a formality. Certification proves the expertise to implement, manage, and continually improve an ISMS, opening doors to information security careers and equipping professionals to lead or audit implementations with confidence.
PECB link
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27001