A tailored course, built for your situation
Mastering ISO 27001 for Service Delivery Leaders in Global IT Services
Build authoritative control narratives that align teams and accelerate audit cycles
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Audit evidence packages requiring last-minute reconciliation under client review cycles
The situation this course is for
Service delivery teams spend significant hours pulling together audit evidence, often duplicating effort across departments. The pressure peaks during client contract reviews and renewal windows, where incomplete or inconsistent documentation leads to rework, delays, and weakened positioning. This isn't about compliance failure, it's about inefficiency in demonstrating control maturity when it matters most.
Who this is for
Service Delivery Manager in a global IT services firm, accountable for client-facing delivery consistency, compliance posture, and contract renewals. Works across technical teams, client stakeholders, and internal governance functions to ensure service reliability and audit readiness.
Who this is not for
This course is not for junior administrators building control checklists, nor for auditors validating compliance. It's designed for delivery leaders who must translate control frameworks into stakeholder confidence and operational efficiency.
What you walk away with
- Produce ISO 27001 evidence packages in under 6 hours of active effort
- Lead client-facing control discussions with confidence and specificity
- Reduce cross-team chasing during audit cycles
- Anticipate and shape vendor selection criteria based on control requirements
- Position compliance as an enabler of contract renewal and client trust
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 27001 in the Context of Service Delivery
Explore how ISO 27001 principles apply specifically to managed service environments. Learn to distinguish between framework requirements and client-specific interpretations, and identify high-impact clauses in service contracts.
12 chapters in this module
- Mapping ISO 27001 clauses to service delivery workflows
- Differentiating between control intent and implementation detail
- Recognizing client-specific compliance expectations
- How service level agreements interact with security controls
- Common misalignments in global delivery teams
- Using ISO 27001 as a client engagement tool
- Identifying control ownership across delivery functions
- Aligning internal audits with contract audit windows
- Documenting control narratives for external reviewers
- Avoiding over-documentation in service environments
- Integrating ISO 27001 with ITIL service management
- Tracking control maturity across delivery phases
Module 2. Building the Foundation: Scope and Statement of Applicability
Learn how to define a credible scope for ISO 27001 in a multi-client service delivery environment. Develop a defensible Statement of Applicability that reflects real control implementation, not theoretical coverage.
12 chapters in this module
- Defining scope without excluding critical client systems
- Justifying exclusions in a multi-domain environment
- Documenting rationale for each control inclusion or exclusion
- Aligning SoA with client-specific audit demands
- Avoiding scope creep in distributed delivery models
- Using risk assessments to support SoA decisions
- Maintaining SoA consistency across renewal cycles
- Versioning the SoA for audit readiness
- Linking SoA to service delivery documentation
- Communicating SoA boundaries to technical teams
- Handling client requests to expand scope
- Auditor expectations on SoA completeness
Module 3. Risk Assessment That Informs Delivery Decisions
Transform risk assessments from compliance exercises into operational tools. Use risk findings to justify resourcing, shape service design, and influence vendor selection.
12 chapters in this module
- Conducting risk assessments in multi-client environments
- Linking risk findings to service delivery constraints
- Prioritizing risks based on client impact and likelihood
- Documenting risk treatment plans that team leads can execute
- Using risk registers to justify security investments
- Integrating risk assessment with change management
- Avoiding duplicate risk assessments across accounts
- Aligning risk appetite with client contractual terms
- Reporting risk status to delivery leadership
- Updating risk assessments after client incidents
- Using risk data to shape vendor onboarding
- Maintaining risk documentation for audit cycles
Module 4. Control Design for Scalable Service Delivery
Design controls that scale across accounts without increasing overhead. Learn to distinguish between centralized and decentralized implementation, and document design decisions clearly.
12 chapters in this module
- Designing access controls for shared infrastructure
- Standardizing user provisioning across client environments
- Documenting control design for auditor review
- Balancing automation with auditability
- Using templates to maintain control consistency
- Designing monitoring controls for multi-tenancy
- Integrating control design with incident response
- Avoiding over-customization in control implementation
- Scaling encryption practices across delivery teams
- Designing change management for compliance alignment
- Linking control design to knowledge transfer
- Validating control design through walkthroughs
Module 5. Evidence Collection Without Rework
Develop systems to collect audit evidence continuously, not just before audits. Learn how to design evidence templates that reduce follow-up and clarify ownership.
12 chapters in this module
- Identifying evidence types required by ISO 27001
- Assigning evidence ownership to delivery roles
- Designing evidence templates for consistency
- Automating evidence capture in service workflows
- Storing evidence for multi-cycle retention
- Using ticketing systems to demonstrate control execution
- Validating evidence completeness before audit cycles
- Reducing manual follow-up during evidence collection
- Linking evidence to control narratives
- Handling client-specific evidence requests
- Training delivery teams on evidence standards
- Auditor expectations on evidence timeliness
Module 6. Internal Audit Preparation and Readiness
Prepare for internal audits with confidence by aligning documentation, evidence, and stakeholder communication. Learn to anticipate auditor questions and streamline review cycles.
12 chapters in this module
- Scheduling internal audits around client cycles
- Distributing audit checklists to delivery teams
- Conducting pre-audit walkthroughs with leads
- Documenting control operation for auditor review
- Responding to auditor findings with evidence
- Tracking remediation actions to closure
- Using internal audits to improve delivery processes
- Aligning internal audit scope with certification goals
- Communicating audit timelines to stakeholders
- Avoiding last-minute evidence scrambling
- Building auditor trust through consistency
- Using audit findings to refine control design
Module 7. External Audit Engagement and Communication
Lead external audits effectively by preparing narratives, coordinating responses, and managing stakeholder communication. Turn audit participation into a demonstration of leadership.
12 chapters in this module
- Preparing delivery leads for audit interviews
- Coordinating responses across technical teams
- Documenting control narratives for auditor review
- Communicating audit timelines to client teams
- Anticipating auditor questions on delivery processes
- Responding to findings with confidence and clarity
- Maintaining composure during audit follow-ups
- Using audit engagement to showcase delivery maturity
- Avoiding defensiveness in audit discussions
- Building relationships with certification bodies
- Reporting audit status to leadership
- Turning audit outcomes into service improvements
Module 8. Leveraging Certification for Client Trust
Use ISO 27001 certification as a tool to build client confidence and strengthen contract positions. Align certification messaging with sales and delivery goals.
12 chapters in this module
- Communicating certification to client stakeholders
- Using certification in response to security questionnaires
- Aligning certification scope with client contracts
- Differentiating CGI's offering through certification
- Responding to client audit requests with confidence
- Using certification to justify pricing or scope
- Avoiding over-promising on control coverage
- Maintaining certification relevance across renewals
- Training account teams on certification messaging
- Handling client-specific compliance requirements
- Demonstrating continuous improvement to clients
- Using certification to reduce third-party assessments
Module 9. Managing Change Without Compromising Controls
Integrate change management with control maintenance. Learn how to review changes for compliance impact and document decisions effectively.
12 chapters in this module
- Assessing change impact on ISO 27001 controls
- Documenting control exceptions for emergency changes
- Reviewing changes for audit trail completeness
- Integrating change management with risk assessment
- Training change owners on compliance expectations
- Using CAB meetings to reinforce control ownership
- Avoiding shadow changes in client environments
- Aligning change windows with audit readiness
- Documenting change approvals for auditor review
- Handling client-driven changes with compliance rigor
- Maintaining control consistency across changes
- Using change data to improve control design
Module 10. Vendor Management and Third-Party Assurance
Extend ISO 27001 principles to vendor relationships. Learn how to assess vendor compliance, manage subcontractor risks, and respond to client questions.
12 chapters in this module
- Assessing vendor compliance with ISO 27001
- Managing subcontractor risks in delivery chains
- Documenting vendor assurance for client review
- Using SIG questionnaires effectively
- Aligning vendor SLAs with control requirements
- Conducting vendor audits when necessary
- Handling client concerns about vendor security
- Maintaining vendor documentation for audits
- Integrating vendor management with risk assessment
- Using vendor performance to shape contract decisions
- Training delivery teams on vendor compliance
- Avoiding single points of failure in vendor chains
Module 11. Continuous Improvement Through Internal Feedback
Turn internal findings, client feedback, and incident data into improvements. Build a culture where compliance strengthens delivery, not slows it.
12 chapters in this module
- Using incident reports to improve controls
- Gathering feedback from delivery teams
- Aligning improvement plans with client cycles
- Tracking metrics that reflect control health
- Reporting improvement progress to leadership
- Avoiding compliance fatigue in teams
- Recognizing teams for control excellence
- Using near-misses to strengthen controls
- Integrating lessons learned into training
- Balancing improvement with operational demands
- Documenting changes for auditor review
- Sustaining momentum after certification
Module 12. Sustaining Certification Across Leadership Changes
Ensure ISO 27001 maturity survives personnel shifts. Build documentation, training, and oversight practices that preserve institutional knowledge.
12 chapters in this module
- Documenting control ownership and accountability
- Training new staff on compliance expectations
- Maintaining documentation for long-term audits
- Using playbooks to preserve best practices
- Aligning compliance with onboarding processes
- Reducing dependency on individual experts
- Reviewing controls after team restructures
- Communicating compliance priorities to new leaders
- Using internal audits to validate knowledge transfer
- Maintaining momentum after manager changes
- Building redundancy in compliance ownership
- Ensuring continuity through certification cycles
How this maps to your situation
- Service Delivery Manager in global IT services
- Accountable for audit readiness and client trust
- Works across technical, client, and governance teams
- Needs to reduce rework and strengthen compliance posture
Before vs. after
Before
Spending weeks compiling audit evidence, reacting to client requests, and managing cross-team dependencies without a clear process.
After
Producing compliant, consistent evidence in under six hours, leading audit discussions with confidence, and shaping vendor and service design decisions.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: 90 minutes on a Sunday, with modular content designed to fit into busy schedules.
If nothing changes
Continuing with ad-hoc evidence collection risks missed renewal windows, weakened client trust, and increased operational burden during audit cycles.
How this compares to the alternatives
Unlike generic compliance courses, this program focuses on the specific challenges of service delivery managers in global IT firms, with templates and narratives tailored to CGI-scale operations.
Frequently asked
Do I need prior ISO 27001 experience to benefit?
No. The course is designed for service delivery leaders who manage compliance outcomes, not build control checklists from scratch.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is this course specific to CGI or my client base?
No. While it reflects common challenges in global IT services, it does not reference CGI or any specific client. The content is broadly applicable and focused on service delivery leadership.
$199 one-time. 90 minutes on a Sunday, with modular content designed to fit into busy schedules..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours