A tailored course, built for your situation
Mastering ISO 27001 for Facilities and Workplace Operations Leaders
Turn security policy into action in record time
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Spending too long translating standards into on-the-ground controls?
The situation this course is for
Facilities and workplace leaders often sit between high-level compliance mandates and frontline execution. Without a structured way to interpret ISO 27001 controls, teams default to slow, iterative reviews, duplicative walkthroughs, and reactive audits. Most delays aren’t technical, they’re coordination gaps.
Who this is for
Facilities, workplace, and operations coordinators in tech enterprises who manage or interface with compliance-driven infrastructure programs.
Who this is not for
Enterprise architects focused solely on IT systems, or legal counsel handling documentation-only compliance.
What you walk away with
- Produce compliant access control documentation in under 72 hours
- Map physical security controls directly to ISO 27001 clauses without external consultants
- Deploy incident response protocols that pass internal audit on first review
- Automate recurring compliance checks for workspace environments
- Align vendor security expectations with internal ISO 27001 posture
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 27001 in the Workplace Context
Ground your role in the framework by identifying which clauses directly impact facilities and workplace operations. Focus on Annex A controls relevant to physical security, access management, and environmental resilience.
12 chapters in this module
- What ISO 27001 means for non-IT roles
- The 7 clauses that impact workplace teams
- How facilities contribute to information security
- Mapping workspace layout to control zones
- Defining secure access tiers for buildings
- Visitor policy and information protection
- Physical security as a compliance artefact
- Documenting environmental controls
- Workplace incident response triggers
- Vendor access and contractual alignment
- Integration with corporate security teams
- Common misconceptions about scope
Module 2. Control Mapping for Physical Infrastructure
Learn how to directly link physical workplace elements to ISO 27001 control objectives. Turn floor plans, key systems, and access logs into auditable evidence.
12 chapters in this module
- Translating A.7.1 to desk-level controls
- Mapping A.11 to entry points and zones
- Secure storage for sensitive materials
- Camera systems as compliance assets
- Badge access logs as audit trails
- Key management and dual control
- Parking and perimeter security
- Loading docks and delivery handling
- Emergency exits and security trade-offs
- Remote site consistency
- Mobile worker access policies
- Third-party managed spaces
Module 3. Documenting the Statement of Applicability
Build a clear, evidence-backed SoA tailored to workplace operations. Justify inclusions, exclusions, and compensating controls without over-relying on central teams.
12 chapters in this module
- Purpose of the Statement of Applicability
- Identifying relevant Annex A controls
- Justifying exclusions for non-IT teams
- Compensating controls for shared spaces
- Version control for workplace policies
- Linking policy to real-world procedures
- Using templates for faster drafting
- Avoiding over-documentation
- Aligning with corporate security language
- Review cycles for legal and compliance
- Evidence collection for physical controls
- SoA sign-off roles and thresholds
Module 4. Developing a Workplace-Specific Risk Assessment
Conduct a targeted risk assessment focused on facilities and workplace operations. Identify threats to physical assets and information integrity.
12 chapters in this module
- Scope definition for non-IT teams
- Asset identification: people, places, equipment
- Threats unique to shared workspaces
- Likelihood vs impact for physical breaches
- Vendor-related security risks
- Insider threats in facilities roles
- Weather and environmental threats
- Data exposure in common areas
- Incident escalation paths
- Risk register maintenance
- Reporting upward without alarmism
- Aligning with corporate risk calendar
Module 5. Designing Secure Onboarding and Offboarding
Create standardized processes for employee and contractor access setup and deactivation that comply with ISO 27001 control objectives.
12 chapters in this module
- Onboarding workflow integration
- First-day access provisioning
- Badge and key distribution logs
- Secure desk assignment process
- Personal data handling during onboarding
- Offboarding checklist for space access
- Key and badge return verification
- Remote worker deactivation
- Contractor access timelines
- Auditing past deprovisioning
- Integration with HR systems
- Monthly access reviews
Module 6. Incident Response Planning for Facilities
Develop a clear, actionable response plan for security incidents involving physical space, access, or environmental threats.
12 chapters in this module
- Defining incident vs anomaly
- Secure handling of lost badges
- Lockdown procedures
- Visitor policy violations
- Suspicious packages or persons
- Data exposure in meeting rooms
- Evacuation logs as compliance records
- Coordination with security operations
- Post-incident documentation
- Root cause analysis templates
- Training staff on response roles
- Quarterly tabletop simulations
Module 7. Auditing with Confidence
Prepare for internal and external audits by organizing evidence, conducting pre-audits, and reducing rework cycles.
12 chapters in this module
- Audit timeline expectations
- Evidence collection calendar
- Document retention policies
- Internal pre-audit checklist
- Responding to auditor questions
- Defending exclusions confidently
- Common findings in workplace audits
- Leveraging past audit reports
- Cross-functional coordination
- Remote auditor access protocols
- Post-audit action planning
- Continuous improvement loop
Module 8. Vendor Security Oversight
Apply ISO 27001 principles to third-party vendors managing cleaning, security, and maintenance services.
12 chapters in this module
- Vendor pre-qualification checklist
- Security requirements in RFPs
- Contractual compliance clauses
- Onsite conduct expectations
- Background checks and verification
- Audit rights for third parties
- Incident reporting obligations
- Performance reviews with compliance lens
- Termination and transition planning
- Shared space agreements
- Multi-tenant compliance alignment
- Escalation paths for non-compliance
Module 9. Policy Development and Maintenance
Write and maintain policies that are specific, enforceable, and aligned with ISO 27001 without becoming overly burdensome.
12 chapters in this module
- Writing for clarity and actionability
- Policy vs procedure distinctions
- Version control and naming
- Review cycles and updates
- Approval workflows
- Communicating changes to staff
- Training materials linked to policy
- Enforcement mechanisms
- Language for global teams
- Accessibility considerations
- Archiving deprecated policies
- Audit trail for policy changes
Module 10. Continuous Improvement and Metrics
Track meaningful compliance metrics and drive improvements without overburdening your team.
12 chapters in this module
- Key metrics for workplace compliance
- Cycle time for policy updates
- Audit finding closure rate
- Incident resolution time
- Vendor compliance score
- Access control accuracy
- Staff training completion
- Benchmarking against peers
- Reporting to leadership
- Setting improvement targets
- Feedback collection process
- Annual review planning
Module 11. Cross-Functional Alignment
Build trust and coordination with IT security, legal, and HR teams to streamline compliance efforts.
12 chapters in this module
- Understanding IT security priorities
- Speaking the language of security teams
- Aligning access calendars
- Joint incident response planning
- Legal compliance touchpoints
- HR collaboration on onboarding
- Facilities role in data subject requests
- Shared documentation platforms
- Regular sync meetings
- Escalation protocols
- Disagreement resolution framework
- Credits for shared wins
Module 12. Sustaining ISO 27001 Beyond Certification
Turn compliance into continuous capability, ensuring your workplace remains audit-ready without rework.
12 chapters in this module
- Beyond the certification date
- Ongoing control monitoring
- Change management process
- New site onboarding
- Mergers and space consolidation
- Remote work policy adaptation
- Technology refresh integration
- Lessons from past audits
- Team knowledge retention
- Succession planning
- Annual compliance calendar
- Celebrating compliance wins
How this maps to your situation
- Preparing for an internal audit
- Leading a vendor security review
- Updating access control policies
- Responding to an incident
Before vs. after
Before
Spending weeks assembling evidence and clarifying scope with other teams before audits.
After
Producing compliant outputs in days, with confidence in coverage and documentation.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 12 weeks with real-world application built in.
If nothing changes
Without a structured approach, facilities teams remain reactive, spending disproportionate time on compliance cycles, increasing exposure to audit findings and operational delays.
How this compares to the alternatives
Unlike generic compliance courses, this program is tailored to workplace and facilities leaders, focusing on the exact controls and artefacts they own, not just IT systems. No other course bridges ISO 27001 to physical operations this directly.
Frequently asked
Do I need prior experience with ISO 27001?
No. This course is designed for practitioners new to the standard but responsible for areas it covers.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I apply this across multiple locations?
Yes. The templates and methods are scalable across sites and regions.
$199 one-time. Approximately 3 hours per module, designed for completion over 12 weeks with real-world application built in..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours