A tailored course, built for your situation
Mastering ISO 27001 for CGI Partner Delivery Managers
Build an enduring security delivery capability that compounds across programs and clients
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Most security compliance efforts are project-bound and deplete with team turnover
The situation this course is for
Teams invest heavily in audit readiness, but when one program ends, the next starts from scratch. Knowledge doesn’t carry forward. Stakeholders re-litigate controls. Momentum stalls. Practitioners burn out rebuilding what should be institutional.
Who this is for
Senior delivery leaders in global systems integrators managing multi-client portfolios under regulatory scrutiny
Who this is not for
Individual contributors focused on single-system implementations or auditors preparing for certification exams
What you walk away with
- Produce client-ready Statements of Applicability in under 48 hours
- Re-use 80%+ of control documentation across engagements
- Turn compliance evidence flows into repeatable delivery accelerators
- Build internal reputation as the practitioner who makes ISO 27001 feel lightweight
- Enable new teams to stand up compliant delivery lanes using your templates
The 12 modules (with all 144 chapters)
Module 1. The Evolving Role of Delivery Managers in Security Governance
Understand how senior delivery roles are becoming central to security assurance across client portfolios. This module frames ISO 27001 not as a checklist but as a strategic lever for consistent, trusted delivery.
12 chapters in this module
- How delivery leaders now own early-stage compliance decisions
- Why client trust hinges on consistent control application
- The shift from auditor-led to delivery-led compliance
- Mapping stakeholder expectations across geographies
- When security governance becomes a differentiator in deal pursuit
- Balancing speed and rigor in multi-client environments
- The cost of rework when compliance isn't institutionalized
- How top performers embed controls into kickoff workflows
- Linking delivery milestones to audit readiness gates
- Recognizing early signs of control drift in programs
- Building credibility with internal risk committees
- Setting expectations with clients on shared responsibilities
Module 2. ISO 27001 Foundations for Delivery Practitioners
Learn the core structure of ISO 27001 without getting lost in technical jargon. Focus on clauses and controls that matter most to delivery timelines and client assurance.
12 chapters in this module
- Why ISO 27001 applies beyond dedicated security teams
- Understanding Clause 4: Context of the Organization
- Clause 5 leadership commitments in delivery settings
- Clause 6 planning for compliance across programs
- Risk assessment approaches that don’t slow delivery
- Clause 7 support functions and resource alignment
- Operational planning under Clause 8
- Clause 9 performance evaluation for delivery leads
- Clause 10 continual improvement in client work
- Mapping ISO 27001 to common delivery lifecycles
- Integrating controls into sprint planning
- Avoiding over-documentation while staying compliant
Module 3. Building a Reusable Information Security Policy Framework
Create an organizational baseline of policies that travel across engagements, reducing setup time and increasing consistency.
12 chapters in this module
- Why one-off policies create delivery drag
- Identifying controls that apply across clients
- Drafting policy templates with modular clauses
- Gaining sign-off without slowing down
- Version control for policy updates
- Linking policy to role-based training requirements
- How to handle client-specific exceptions
- Documenting policy applicability decisions
- Using policy as a pre-sales credibility asset
- Integrating policy with supplier agreements
- Updating policy in response to audit findings
- Measuring policy adoption across delivery teams
Module 4. Designing Scalable Risk Assessments
Develop repeatable risk assessment workflows that maintain rigor without requiring specialist input for every project.
12 chapters in this module
- Scoping risk assessments across delivery contexts
- Standardizing asset identification processes
- Threat modeling at delivery speed
- Vulnerability classification frameworks
- Risk treatment options that align with client SLAs
- Documenting risk acceptance decisions securely
- Automating risk register updates
- Integrating risk findings into backlog planning
- Validating controls post-remediation
- Aligning risk posture with client risk appetite
- Reporting risk status to non-technical stakeholders
- Avoiding reassessment fatigue in long-term programs
Module 5. Creating Repeatable Statements of Applicability
Develop a living SoA template that evolves with each engagement, reducing audit prep from weeks to days.
12 chapters in this module
- Structure of a client-ready Statement of Applicability
- Automating control selection based on scope
- Justifying inclusion or exclusion of controls
- Maintaining audit trails for control decisions
- Using SoA as a negotiation tool with clients
- Versioning SoA across delivery variants
- Linking SoA to implementation evidence
- Generating SoA outputs in under two days
- Customizing SoA without losing reusability
- Training teams to maintain SoA integrity
- Integrating SoA with proposal responses
- Updating SoA in response to client feedback
Module 6. Embedding Controls into Delivery Workflows
Operationalize ISO 27001 controls into everyday delivery activities so compliance becomes invisible.
12 chapters in this module
- Integrating access reviews into sprint retrospectives
- Automating evidence collection for audit trails
- Scheduling control activities without disrupting flow
- Role-based access control in multi-client teams
- Secure onboarding and offboarding checklists
- Logging and monitoring for delivery environments
- Incident response readiness in agile settings
- Change management for compliant deployments
- Physical security considerations in distributed teams
- Vendor management controls that scale
- Encryption policies for data in transit and at rest
- Ensuring continuity of control during team transitions
Module 7. Developing Audit-Ready Documentation
Produce clean, consistent, and client-trust-building documentation that passes scrutiny the first time.
12 chapters in this module
- Designing documentation for reviewer clarity
- Minimizing documentation without introducing risk
- Standardizing evidence naming and storage
- Creating self-explanatory control descriptions
- Organizing folders for easy audit navigation
- Linking documentation to control objectives
- Using screenshots and diagrams effectively
- Version control for compliance assets
- Documenting exceptions with justification
- Preparing for unannounced audits
- Training others to maintain documentation quality
- Auditing your own team's documentation rigor
Module 8. Leading Internal Audits and Readiness Reviews
Run proactive internal assessments that strengthen readiness and reduce last-minute scrambling.
12 chapters in this module
- Scheduling audits without disrupting delivery
- Designing checklists tailored to delivery models
- Conducting remote audit sessions efficiently
- Reporting findings with actionable clarity
- Prioritizing remediation based on client impact
- Building trust with audit teams
- Running gap analysis workshops
- Simulating auditor interviews
- Generating improvement plans that stick
- Tracking closure of audit observations
- Using audit data to refine delivery playbooks
- Celebrating audit success across teams
Module 9. Managing Third-Party and Vendor Risk
Streamline vendor assurance processes to accelerate onboarding and ensure downstream compliance.
12 chapters in this module
- Assessing vendor risk at procurement stage
- Using SIG templates effectively
- Conducting remote vendor assessments
- Validating SOC 2 and ISO 27001 reports
- Managing exceptions with legal and procurement
- Tracking vendor compliance over time
- Handling multi-tiered subcontractor risk
- Building vendor questionnaires that get results
- Integrating vendor risk into project timelines
- Documenting due diligence for auditors
- Enforcing security clauses in SLAs
- Scaling vendor oversight across client portfolios
Module 10. Training and Awareness for Delivery Teams
Foster a culture of security ownership across technical and non-technical roles.
12 chapters in this module
- Designing role-specific security training
- Onboarding new team members securely
- Delivering engaging compliance content
- Measuring training effectiveness
- Creating phishing simulation programs
- Handling policy acknowledgment at scale
- Integrating awareness into team rituals
- Tailoring content for global teams
- Using real incidents as teaching moments
- Empowering team leads to reinforce norms
- Reducing human error through design
- Celebrating security champions publicly
Module 11. Continuous Improvement and Performance Metrics
Track compliance health over time and demonstrate improvement to leadership and clients.
12 chapters in this module
- Identifying leading indicators of compliance health
- Tracking control effectiveness over time
- Setting benchmarks for improvement
- Using dashboards to show progress
- Reporting metrics to executive stakeholders
- Aligning improvement goals with delivery KPIs
- Conducting post-mortems that drive change
- Sharing lessons across delivery units
- Benchmarking against industry standards
- Using metrics in client assurance discussions
- Celebrating milestones in maturity
- Iterating on the entire compliance lifecycle
Module 12. Scaling Compliance Across Client Portfolios
Turn individual project success into an organization-wide advantage.
12 chapters in this module
- Identifying patterns across client engagements
- Standardizing templates without losing flexibility
- Creating centers of excellence for delivery teams
- Mentoring new delivery leads on compliance
- Sharing playbooks across regions
- Building internal reputation as a go-to resource
- Contributing to firm-wide compliance strategy
- Reducing onboarding time for new clients
- Using compliance as a sales enabler
- Driving consistency in global delivery
- Measuring ROI of compliance investments
- Leaving behind a lasting institutional asset
How this maps to your situation
- Initial client onboarding and scoping
- Mid-cycle delivery assurance
- Pre-audit readiness and review
- Post-engagement knowledge retention
Before vs. after
Before
Compliance is reactive, project-bound, and depletes with each delivery end.
After
Compliance is proactive, reusable, and compounds in value across every new engagement.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 90 minutes of focused learning per week over six weeks, designed for senior practitioners balancing delivery responsibilities.
If nothing changes
Without a structured approach, each new delivery starts from zero on compliance, wasting time, increasing risk exposure, and missing opportunities to build lasting institutional strength.
How this compares to the alternatives
Unlike generic ISO 27001 courses, this program is tailored to delivery leaders in global integrators, focusing on reuse, scalability, and compounding value, not just certification.
Frequently asked
Is this course focused on passing audits?
Passing audits is a side effect. This course is designed to build reusable compliance assets that save time and strengthen delivery across clients.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I receive templates I can use immediately?
Yes, every module includes downloadable, customizable templates and real-world examples ready for adaptation.
$199 one-time. Approximately 90 minutes of focused learning per week over six weeks, designed for senior practitioners balancing delivery responsibilities..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours