A tailored course, built for your situation
Deeper command of the ISO 27001 control mapping
Master the framework to become the go-to practitioner on your engagements
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior delivery and assurance practitioners leading client engagements requiring ISO 27001 compliance
Who this is not for
Entry-level auditors or team members not involved in framework design or client advisory
What you walk away with
- Complete ISO 27001 control mapping without senior oversight
- Sources and specific examples on hand when clients push back
- Faster path from policy intent to working security artefact
- Reference of choice on cross-functional risk calls
- Documented playbook that survives leadership changes
The 12 modules (with all 144 chapters)
Module 1. ISO 27001 structure and scope fundamentals
Understand the hierarchy of clauses, controls, and annexes with precision. Learn how scope boundaries shape implementation effort and audit readiness.
12 chapters in this module
- Clause 4 context
- Scope definition
- Leadership commitment
- Policy framework
- Objectives setting
- Resource planning
- Roles clarity
- Competence mapping
- Awareness strategy
- Documentation control
- Control ownership
- Continuous improvement
Module 2. Risk assessment alignment with Annex A
Map real client risks to controls without forcing generic templates. Build defensible rationale for inclusions and exclusions.
12 chapters in this module
- Risk methodology
- Asset identification
- Threat modeling
- Vulnerability mapping
- Impact scoring
- Likelihood assessment
- Risk register
- Treatment options
- Control justification
- Annex A mapping
- Exclusion rationale
- Audit trail
Module 3. Control implementation by domain
Break down implementation by control type, organizational, people, physical, technical, with ready-to-adapt examples.
12 chapters in this module
- A.5.1 policies
- A.5.2 inventory
- A.6.1 roles
- A.6.2 segregation
- A.7.1 awareness
- A.7.2 discipline
- A.8.1 asset handling
- A.8.2 clear desk
- A.9.1 access control
- A.9.2 privilege management
- A.10.1 encryption
- A.10.2 key management
Module 4. SoA development and justification
Build a Statement of Applicability that withstands auditor scrutiny and client challenge with documented reasoning.
12 chapters in this module
- SoA purpose
- Control selection
- Exclusion justification
- Risk linkage
- Implementation status
- Evidence mapping
- Review frequency
- Version control
- Stakeholder input
- Sign-off process
- Audit readiness
- Client presentation
Module 5. Policy drafting and client customization
Create enforceable, client-specific policies that satisfy ISO 27001 without overreach or generic filler.
12 chapters in this module
- Scope policy
- Acceptable use
- Access control
- Encryption
- Remote work
- Incident reporting
- Backup
- Change management
- Vendor oversight
- HR security
- Physical security
- Clean desk
Module 6. Audit readiness and evidence collection
Align evidence collection to auditor expectations. Know exactly what artifacts are required for each control.
12 chapters in this module
- Evidence types
- Retention rules
- Interview prep
- Log review
- Configuration checks
- Policy attestation
- Access reviews
- Incident logs
- Backup verification
- Pen test reports
- Vendor assessments
- Internal audit
Module 7. Internal audit and gap assessment
Run credible internal assessments that identify real gaps, not just checkbox compliance.
12 chapters in this module
- Audit planning
- Checklist design
- Evidence sampling
- Control testing
- Finding severity
- Remediation tracking
- Management report
- Follow-up cycle
- Client communication
- Audit independence
- Tooling options
- Reporting rhythm
Module 8. Management review and continual improvement
Turn ISO 27001 from a compliance exercise into a strategic feedback loop endorsed by leadership.
12 chapters in this module
- Review frequency
- Performance metrics
- Incident trends
- Audit results
- Risk changes
- Resource gaps
- Action plans
- Stakeholder input
- Minutes documentation
- Escalations
- Improvement initiatives
- Board-level summary
Module 9. Third-party and vendor risk integration
Extend ISO 27001 controls to vendors with scalable due diligence and monitoring.
12 chapters in this module
- Vendor inventory
- Risk categorization
- Due diligence
- Contract clauses
- Assessment frequency
- Audit rights
- Subprocessor oversight
- Incident notification
- Compliance evidence
- Exit procedures
- Cloud providers
- Managed services
Module 10. Integration with other frameworks
Map ISO 27001 to NIST CSF, SOC 2, and GDPR for clients with multiple compliance demands.
12 chapters in this module
- NIST CSF mapping
- SOC 2 overlap
- GDPR alignment
- COBIT links
- PCI DSS
- HIPAA
- DORA
- NIS2
- CMMC
- ISO 22301
- ISO 9001
- Tailoring integration
Module 11. Client-specific adaptation and scoping
Avoid one-size-fits-all implementations. Learn how to scope tightly around client maturity and risk profile.
12 chapters in this module
- Maturity assessment
- Risk appetite
- Industry profile
- Geographic footprint
- Technology stack
- Existing controls
- Change tolerance
- Budget constraints
- Timeline pressure
- Stakeholder map
- Customization strategy
- Phased rollout
Module 12. Stakeholder communication and escalation
Lead conversations with executives, legal, and tech teams using clear, confident rationale rooted in the standard.
12 chapters in this module
- Executive summary
- Legal liaison
- Tech team briefing
- Escalation protocol
- Change resistance
- Cost justification
- Timeline negotiation
- Vendor alignment
- Audit defense
- Client education
- Crisis response
- Lessons learned
How this maps to your situation
- When leading a new ISO 27001 engagement
- During internal audit preparation
- When clients resist control implementation
- Before external certification audit
Before vs. after
Before
Reliant on senior input for control decisions and audit responses
After
Confidently lead ISO 27001 engagements with documented rationale and client-ready artefacts
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: 6-8 hours total, self-paced over 3 weeks
How this compares to the alternatives
Unlike generic online courses, this is structured for senior practitioners , no beginner content, no theory-only modules. Unlike consulting workshops, it leaves you with reusable templates and a personal playbook.
Frequently asked
How is this different from a standard ISO 27001 foundation course?
This is designed for senior delivery roles , not awareness or basics. It focuses on control justification, client negotiation, and audit defense with real-world artefacts.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is this relevant for non-technical delivery leads?
Yes , it emphasizes articulation, scoping, and stakeholder leadership over technical depth.
$199 one-time. 6-8 hours total, self-paced over 3 weeks.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours