A tailored course, built for your situation
Influence across more business units with ISO 27001
Expand your impact by mastering the framework that connects security, compliance, and operations across functions.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Mid-level compliance, risk, or governance practitioner at a global services firm contributing to control frameworks, audits, or client assurance deliverables.
Who this is not for
Executives seeking board-level summaries, consultants selling ISO 27001 certification services, or teams focused exclusively on non-overlapping standards like SOC 2 or HIPAA.
What you walk away with
- Lead ISO 27001 control discussions with confidence across teams
- Anticipate audit requirements before they're escalated
- Shape consistent control implementation across multiple client accounts
- Serve as a reference point for peers in security, risk, and delivery
- Build reusable templates that reduce rework across engagements
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 27001 in a multi-client environment
Ground your knowledge in the structure and intent of ISO 27001, with examples from global delivery models.
12 chapters in this module
- Scope of ISO 27001
- Core principles overview
- Role in client assurance
- Integration with delivery lifecycles
- Mapping to service offerings
- Common misconceptions clarified
- How it differs from SOC 2
- Link to risk assessment
- Use in pre-sales alignment
- Client audit expectations
- Internal vs external audits
- Key documentation outputs
Module 2. Building the Information Security Policy
Create a foundational policy aligned with ISO 27001 that stands up to client scrutiny.
12 chapters in this module
- Policy purpose and audience
- Information classification levels
- Access control principles
- Physical security clauses
- Change management integration
- Incident reporting structure
- Acceptable use statement
- Compliance obligations
- Review and update cycle
- Stakeholder alignment steps
- Version control approach
- Approval workflow design
Module 3. Risk assessment under ISO 27001
Conduct a defensible risk assessment that supports control deployment.
12 chapters in this module
- Risk methodology selection
- Asset identification process
- Threat and vulnerability mapping
- Inherent vs residual risk
- Risk acceptance criteria
- Scoring calibration
- Risk treatment options
- Documenting rationale
- Linking to control objectives
- Third-party risk inclusion
- Frequency of reassessment
- Reporting to oversight forums
Module 4. Statement of Applicability (SoA) creation
Build a clear, client-ready SoA that justifies control inclusion and exclusion.
12 chapters in this module
- Purpose of the SoA
- Control inventory setup
- Justifying exclusions
- Referencing Annex A controls
- Tailoring for client needs
- Version tracking method
- Peer review process
- Integration with client requests
- Common audit findings
- Maintaining consistency
- Stakeholder sign-off
- Updating across cycles
Module 5. Internal audit readiness
Prepare for internal audits with confidence using proven checklists and workflows.
12 chapters in this module
- Audit planning timeline
- Checklist development
- Sampling approach
- Evidence collection
- Interview preparation
- Finding classification
- Remediation tracking
- Reporting structure
- Management review input
- Follow-up cadence
- Lessons learned log
- Audit communication plan
Module 6. Management review meetings
Lead or contribute to effective management reviews with structured inputs.
12 chapters in this module
- Agenda design
- Attendance criteria
- Input documentation
- Risk register update
- Audit finding summary
- Control performance metrics
- Resource requests
- Strategic alignment points
- Minutes format
- Action item tracking
- Escalation pathways
- Meeting frequency
Module 7. Continuous improvement cycle
Embed feedback loops that keep the ISMS adaptive and client-relevant.
12 chapters in this module
- Identifying improvement areas
- Root cause analysis
- Corrective action planning
- Effectiveness validation
- Trend analysis
- Client feedback integration
- Internal lessons sharing
- Benchmarking progress
- Update documentation
- Stakeholder communication
- Tooling for tracking
- Performance indicators
Module 8. Cross-unit control alignment
Apply ISO 27001 consistently across teams and geographies.
12 chapters in this module
- Standardizing control language
- Central vs local ownership
- Regional adaptation rules
- Training for consistency
- Audit process harmonization
- Shared templates strategy
- Conflict resolution
- Change propagation
- Governance forums
- Metrics for alignment
- Vendor management
- Client-specific tailoring
Module 9. Vendor management under ISO 27001
Extend your control framework to third parties with confidence.
12 chapters in this module
- Vendor classification
- Due diligence requirements
- Contractual clauses
- Audit rights negotiation
- Subcontractor oversight
- Information security agreements
- Onboarding checks
- Ongoing monitoring
- Incident response planning
- Exit procedures
- Performance metrics
- Compliance verification
Module 10. Incident response and reporting
Design processes that meet ISO 27001 requirements and client expectations.
12 chapters in this module
- Incident definition
- Classification levels
- Detection mechanisms
- Escalation paths
- Containment procedures
- Forensic readiness
- Client notification process
- Regulatory reporting
- Post-incident review
- Lessons documented
- Update controls
- Team training
Module 11. Certification audit preparation
Navigate external audits with clarity and readiness.
12 chapters in this module
- Choosing a certification body
- Stage 1 audit prep
- Stage 2 audit prep
- Document readiness
- Evidence trail setup
- Interview readiness
- Common findings to avoid
- Corrective action response
- Audit report review
- Surveillance audits
- Recertification cycle
- Maintaining certification
Module 12. Scaling influence through reusable assets
Turn your work into shareable, reusable tools that expand your reach.
12 chapters in this module
- Template libraries
- Playbook development
- Internal training modules
- Peer mentoring model
- Knowledge base setup
- Version control system
- Contribution guidelines
- Feedback integration
- Adoption tracking
- Recognition systems
- Leadership visibility
- Cross-line collaboration
How this maps to your situation
- When starting a new client engagement
- Before an internal audit cycle
- During management review planning
- After a vendor incident
Before vs. after
Before
Working reactively across client requests, using fragmented templates, and responding to audit findings after they arise.
After
Proactively shaping control design, reusing proven assets, and being consulted across business units before issues emerge.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed to fit around project deadlines.
How this compares to the alternatives
Unlike generic ISO 27001 overviews, this course is tailored to practitioners in global delivery environments who need to apply the standard across multiple clients and regions. It emphasizes reusable artefacts and influence beyond a single project.
Frequently asked
Is this course aligned with the latest ISO 27001 standard?
Yes, the course reflects the current ISO/IEC 27001 standard and includes updates relevant to the current cycle, the current cycle audit cycles.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I receive a certificate upon completion?
This course is practice-focused and does not issue formal certification, but you can download a completion record for your files.
$199 one-time. Approximately 3 hours per module, designed to fit around project deadlines..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours