A tailored course, built for your situation
Mastering ISO 27001 for Senior Content and Format Executives
Build influence by leading information governance in unscripted programming
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Most format leaders are consulted late on data and security decisions, despite owning the assets at the highest risk.
The situation this course is for
In unscripted content, sensitive participant data, vendor contracts, and pre-release footage create compliance exposure that escalates fast. But because information security is seen as a backend function, creative leaders often get looped in after decisions are made, leaving them scrambling to adapt or push back without structured support.
Who this is for
Senior format executives in global media organizations who steward high-value unscripted content and lead cross-functional vendor and production teams.
Who this is not for
Entry-level producers, legal-only compliance staff, or IT auditors focused solely on technical controls without creative workflow context.
What you walk away with
- Lead ISO 27001 compliance initiatives specific to content production workflows
- Present control mappings that align with both network standards and production realities
- Gain peer recognition as the go-to authority on information security for unscripted formats
- Shape vendor selection criteria with documented security benchmarks
- Build repeatable security playbooks that survive team turnover and format iterations
The 12 modules (with all 144 chapters)
Module 1. The Role of Format Leadership in Information Security
Establish why unscripted content leaders are central to data governance due to their control over participant data, third-party vendors, and pre-broadcast assets. Define how influence is built through early involvement in ISO 27001 planning.
12 chapters in this module
- Defining information security in content production
- Why format leads own unique data risk
- Mapping creative workflows to ISO 27001 domains
- Positioning governance as a creative enabler
- Aligning compliance with format longevity
- Building trust with legal and IT partners
- The executive expectation gap in media
- From oversight to strategic contributor
- Case: Early security input preventing format delays
- Vendor data practices in unscripted shows
- Documenting decision ownership
- Creating influence through consistency
Module 2. Understanding ISO 27001 Structure and Intent
Break down the ISO 27001 standard into actionable components relevant to media production, emphasizing clauses on asset management, access control, and third-party risk. Focus on how the framework supports creative operations.
12 chapters in this module
- ISO 27001 clauses explained plainly
- Clause 4: Context of the organization
- Clause 5: Leadership commitment
- Clause 6: Risk assessment planning
- Clause 7: Documentation needs
- Clause 8: Operational controls
- Clause 9: Monitoring compliance
- Clause 10: Continuous improvement
- Mapping clauses to format teams
- Executive summary templates
- Gap analysis for content divisions
- Translating controls to production timelines
Module 3. Content-Centric Risk Assessment
Teach how to conduct ISO 27001-aligned risk assessments focused on unscripted content pipelines, participant confidentiality, and vendor data handling. Emphasize practical outputs over theoretical models.
12 chapters in this module
- Identifying information assets in formats
- Classifying sensitivity levels
- Threat modeling for reality production
- Data flow from casting to delivery
- Assessing third-party vendor risk
- Evaluating cloud storage exposure
- Risk scoring with production context
- Linking risk to format lifecycle
- Documentation standards for auditors
- Creating risk registers for teams
- Updating assessments per season
- Presenting risk to non-technical leads
Module 4. Building the Information Security Policy
Guide creation of a tailored ISMS policy that reflects both corporate compliance and creative team needs, including access rules, incident response, and vendor data clauses specific to unscripted formats.
12 chapters in this module
- Purpose of the ISMS policy
- Scope definition for content teams
- Access control rules for editors
- Data retention timelines
- Incident reporting workflows
- Acceptable use for field crews
- Remote work security standards
- Encryption expectations
- Policy sign-off process
- Version control and updates
- Training rollout plan
- Auditor-ready formatting
Module 5. Access Control in High-Turnover Production Environments
Address the challenge of managing access to sensitive files across freelance crews, editors, and vendors, using ISO 27001 controls to maintain security without slowing production.
12 chapters in this module
- User access lifecycle in unscripted TV
- Defining roles and permissions
- Onboarding security requirements
- Temporary access protocols
- Offboarding checklist
- Cloud storage access logs
- Password sharing risks
- MFA for production teams
- Vendor access audits
- Secure file transfer standards
- Handling leaked footage
- Access review frequency
Module 6. Vendor and Third-Party Security Oversight
Equip leaders to assess and enforce ISO 27001 compliance in production vendors, from casting agencies to post houses, ensuring contractual and technical alignment.
12 chapters in this module
- Vendor selection security criteria
- Pre-contract due diligence
- Security addendums in deals
- Audit rights for production partners
- Monitoring vendor compliance
- Cloud service provider risks
- Chain of custody for footage
- Penetration testing expectations
- Incident reporting from vendors
- Documenting vendor controls
- Handling non-compliance
- Renewal and termination triggers
Module 7. Information Security in Talent and Casting
Apply ISO 27001 to the handling of contestant data, medical forms, financial disclosures, and background checks, critical areas of risk in unscripted formats.
12 chapters in this module
- PII in casting applications
- Consent documentation
- Medical data handling
- Financial screening protocols
- Background check security
- Casting database access
- Secure transmission to networks
- Data minimization in casting
- Retention periods for applications
- Breach notification plans
- Legal vs. production data needs
- Anonymization for archives
Module 8. Incident Response for Media Productions
Build a tailored incident response plan aligned with ISO 27001 that addresses leaks, unauthorized access, and production disruptions, specific to unscripted content workflows.
12 chapters in this module
- Defining security incidents in media
- Incident classification levels
- Response team roles
- Chain of custody procedures
- Legal and PR coordination
- Reporting to insurers
- Forensic investigation steps
- Internal communication plan
- External disclosure thresholds
- Post-incident review process
- Updating controls after events
- Simulating breach scenarios
Module 9. Internal Audit and Continuous Improvement
Train on conducting ISO 27001 internal audits within creative divisions, focusing on repeatable processes, documentation quality, and production-stage alignment.
12 chapters in this module
- Audit planning for format teams
- Sampling footage access logs
- Reviewing vendor contracts
- Checking encryption compliance
- Interviewing production staff
- Documentation completeness
- Non-conformance tracking
- Corrective action workflows
- Audit report writing
- Presenting findings to executives
- Scheduling recurring audits
- Linking audits to format renewals
Module 10. Management Review and Executive Reporting
Teach how to prepare and lead management review meetings that demonstrate ISO 27001 compliance progress to senior leadership, using media-specific metrics and outcomes.
12 chapters in this module
- Purpose of management review
- Frequency in production cycles
- Agenda design
- Measuring compliance effectiveness
- Reporting on security incidents
- Vendor performance summaries
- Audit finding trends
- Resource needs presentation
- Executive decision tracking
- Minutes and follow-up
- Linking to corporate ESG goals
- Using reviews to expand mandate
Module 11. Certification Preparation and Audit Readiness
Guide through the final steps of ISO 27001 certification, including documentation assembly, auditor engagement, and mock audits tailored to entertainment content operations.
12 chapters in this module
- Choosing a certification body
- Stage 1 audit preparation
- Document submission checklist
- Mock internal audit run
- Addressing findings
- Stage 2 audit readiness
- Auditor Q&A prep
- Corrective action submission
- Certification decision
- Maintaining certification
- Surveillance audit prep
- Recertification strategy
Module 12. Sustaining Influence Through Governance Leadership
Show how to use ISO 27001 expertise to expand strategic influence, leading cross-divisional initiatives, mentoring peers, and shaping future compliance efforts.
12 chapters in this module
- Building a community of practice
- Mentoring associate producers
- Cross-network collaboration
- Presenting at executive forums
- Contributing to policy evolution
- Speaking engagements
- Internal thought leadership
- Documenting playbooks
- Onboarding new leaders
- Scaling governance across formats
- Tracking influence growth
- Next steps beyond ISO 27001
How this maps to your situation
- Leading security in high-stakes unscripted formats
- Aligning creative workflows with compliance
- Managing third-party risk in production
- Expanding leadership beyond creative scope
Before vs. after
Before
Consulted late on security decisions, reacting to policies created without creative context.
After
Invited early to shape governance strategy, leading discussions with confidence and precedent.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, designed to fit within busy production schedules.
If nothing changes
Continuing to engage after security decisions are made risks misalignment, rework, and diminished influence in strategic conversations that shape how unscripted content is produced and protected.
How this compares to the alternatives
Generic ISO 27001 courses focus on IT systems and corporate data centers, this course is tailored to the real-world workflows, vendor relationships, and production pressures of unscripted content leadership.
Frequently asked
Is this course relevant if I’m not in IT or security?
Yes. This course is designed specifically for creative executives who steward sensitive content and lead cross-functional teams. It teaches ISO 27001 in the context of production, not IT infrastructure.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I be certified in ISO 27001 after completing this?
No. This course prepares you to lead and influence ISO 27001 initiatives within your division, but certification is awarded by accredited bodies after formal audit.
$199 one-time. Approximately 3-4 hours per module, designed to fit within busy production schedules..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours