Information Security Management Systems

Learning Outcomes

After successful completion of this course you will:

• How to implement processes and controls within the Information Security management system
• How to identify gaps in an Information Security management system
• Understand the mandatory documentation requirements of an Information Security system
• How to improve your organisation’s conformance with ISO/IEC 27001:2022

Course Content

This course is delivered as a single 3-day module covering the requirements of ISO/IEC 27001:2022. This course can be joined to an additional module: ‘Becoming a Skilled Lead Internal/External Auditor‘ where participants learn how to conduct management systems audits in accordance with ISO 19011:2018 Guidelines for Auditing Management Systems. To complete these modules together, see our Information Management Systems Lead Auditor course.

Timetable

Wednesday

Information Security Management Systems

• Introduction to Information Security
• Context of Information Security
• Information Security management systems requirements
• Risk-based approach to information security
• Structure of Information Security controls and control attributes.

Thursday

Information Security controls

• Information Security controls – Organisational, people, physical, technological
• Information classification
• Documentation requirements of Information security management systems

Friday 

Information Security application

• Statement of applicability
• Information security audit scenarios
• Course review

Qualification 

Upon successful completion of the course, you will receive a Certificate of Attainment which identifies the Exemplar Global competency below:

• Exemplar Global IS – Information Security management systems

Prerequisites

There are no prerequisites for this course.

Assessment

Throughout the course, you will complete a series of workshops which form part of the assessment. A short multiple-choice exam at the completion of each module assesses the knowledge and understanding gained throughout the training. You will receive continual assistance and feedback from the trainer and are given anecdotal examples of real world audit situations.

No homework or take-home assessment. 

Who should attend 

Designed to cater to a variety of people currently involved in the audit and Information Security Management System process, you should attend if you:

• want to become an internal ISMS auditor
• want to become a 3rd party IS auditor
• need to write and implement a ISMS
• are involved in the Information Security management process
• are a manager responsible for an ISMS and ISMS auditing
• wish to consolidate your existing knowledge into a formal qualification.

Prior experience in auditing and management systems is not essential.

Study Pathway – Where to from here?

If you wish to become a registered third-party, or external Information Security Management Systems auditor with Exemplar Global, you need to have obtained the competency units from this course and the additional Exemplar Global competency units of AU and TL (via our Becoming a Skilled Lead Auditor or Management Systems Lead Auditor courses).

Once you have obtained these units of competency, you can follow the qualification-based path to become a registered third-party or external auditor.  A full explanation of the requirements to become certified with Exemplar Global can be found here, or contact us for more information.

Additional Exemplar Global competencies for Management Systems auditing (Exemplar Global AU and TL) may be added during the same week of training, or attended separately. Competencies for Quality Management Systems (Exemplar Global QM), Environmental Management Systems (Exemplar Global EM) and/or OH&S Management Systems (Exemplar Global OH 45001), and Food Safety Management Systems (Exemplar Global FS) may be attended separately.  

How to enrol

PwC offers an easy, streamlined enrolment process – you can either enrol directly into your course online, or call us on 1300 95 96 92 to enrol over the phone.

Discounts for multiple attendees are available – Please call us to find out what discounts can be applied.

How to pay

We offer a variety of payment methods:

• Direct debit
• Credit card
• Cheque
• Payment plans

Payment plans

We are able to arrange flexible payment plans on an individual basis. Please be aware that your certificate will be held until full payment has been received.

Delivery

Public – Face-to-face

Our regular public courses are conducted at PwC offices in capital cities across Australia. You will enjoy an excellent learning experience in a premium training venue, and;

• We never cancel courses – book with confidence
• Class sizes are kept to manageable numbers – so everybody learns
• No homework or take-home assessment! All work is completed in course time – we know you’re busy
• No major exam – we assess you as you go

Public – Virtual/Online

We’ve developed an online digital classroom to deliver our courses virtually so you can attend from anywhere! Our purpose-built platform is engaging and interactive. Our virtual training platform incorporates:

• Group exercises – facilitated by mini break out workshops amongst participants
• The ability to ask questions in real-time
• Built-in note taking and tracking of course materials
• Interaction with participants and trainer throughout the session through a chat functionality
• Online assessments providing a streamlined marking process

Our aim is to recreate the classroom experience in a safe, virtual environment, maintaining the fun and engaging experience our clients find useful and valuable.

Please note: Due to licensing restrictions, our virtual courses are open to participants from Australia and NZ only.

In-house – Face-to-face or virtual

In-house training can provide a cost-effective training solution for organisations with a number of staff who require training. We can also customise a course to suit your own individual needs, and include your own audit documentation. Call us on 1300 95 96 92 or complete the form below to request a quote. 

Request an In-house quote