A tailored course, built for your situation
Mastering ISO 27001 for Service Delivery Managers
A structured path to owning critical security handoffs with confidence and precision
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Audit and regulator-facing packages requiring cross-team rework under time pressure
The situation this course is for
Service delivery leaders often inherit fragmented compliance workflows, where evidence collection spans teams with different priorities and timelines. This leads to high-effort, last-minute scrambles before audits or regulator reviews, especially when documentation isn't structured for reuse. The burden falls on delivery managers to reconcile gaps, not just report status.
Who this is for
Service Delivery Managers in global IT services firms who steward compliance evidence across project lifecycles, interface with regulators, and own handoffs between delivery and governance teams
Who this is not for
Individuals focused only on technical implementation without cross-functional handoffs, or those seeking executive-level board narratives rather than operational ownership
What you walk away with
- Produce regulator-facing review packages that require no rework
- Own the end-to-end ISO 27001 evidence lifecycle from delivery teams to audit committees
- Reduce evidence collection effort from weeks to hours using reusable templates
- Become the first point of contact for escalations from audit and compliance teams
- Structure SoA narratives that stand up under regulator follow-up questioning
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 27001 in the Context of Service Delivery
Lay the foundation for applying ISO 27001 within delivery operations, focusing on control relevance to client-facing services and how clauses map to real-world deliverables.
12 chapters in this module
- How ISO 27001 supports service delivery resilience in global contracts
- Key differences between certification and continuous compliance
- Mapping Annex A controls to CGI delivery workflows
- Identifying high-impact controls for regulator-facing packages
- Integrating ISO 27001 requirements into service level agreements
- Common pitfalls in interpreting scope for multi-client environments
- Aligning control ownership with delivery team responsibilities
- Using ISO 27001 to strengthen client trust narratives
- Documenting control effectiveness without overburdening teams
- Tracking control performance across delivery lifecycles
- Leveraging ISO 27001 for competitive differentiation in bids
- Maintaining alignment as client requirements evolve
Module 2. Building the Statement of Applicability
Learn how to construct a defensible, audit-ready SoA that reflects true control implementation and is tailored to specific delivery contexts.
12 chapters in this module
- Understanding the purpose and structure of the SoA
- Determining control applicability based on risk assessments
- Documenting justification for control exclusions
- Aligning SoA content with regulator expectations
- Incorporating input from technical and non-technical stakeholders
- Maintaining version control for ongoing audits
- Using templates to streamline SoA updates
- Linking SoA entries to evidence repositories
- Avoiding common mistakes in control rationale
- Tailoring the SoA for different client industries
- Preparing the SoA for internal review cycles
- Updating the SoA in response to audit findings
Module 3. Designing Efficient Evidence Collection Workflows
Create lightweight, repeatable processes for gathering compliance evidence across distributed teams without disrupting delivery timelines.
12 chapters in this module
- Identifying critical evidence types for ISO 27001 audits
- Mapping evidence requirements to team responsibilities
- Designing evidence templates for consistency
- Scheduling evidence collection around delivery milestones
- Integrating evidence workflows into existing tools
- Reducing rework through early validation steps
- Handling evidence for third-party managed services
- Managing evidence for legacy systems
- Using automation to reduce manual effort
- Documenting evidence collection processes
- Training teams on evidence submission standards
- Auditing evidence workflows for continuous improvement
Module 4. Managing Internal Audit Cycles
Lead internal audits effectively by preparing teams, coordinating timelines, and ensuring findings are resolved promptly.
12 chapters in this module
- Planning audit schedules aligned with delivery cycles
- Assigning responsibilities for audit preparation
- Conducting pre-audit readiness checks
- Facilitating audit entry and exit meetings
- Documenting audit observations clearly
- Prioritizing findings based on risk and impact
- Assigning corrective actions with clear deadlines
- Verifying closure of corrective actions
- Reporting audit outcomes to leadership
- Using audit findings to improve processes
- Integrating audit feedback into team workflows
- Maintaining audit records for future reference
Module 5. Preparing for External Audits and Certifications
Ensure smooth external audits by preparing documentation, coordinating stakeholders, and responding to auditor inquiries effectively.
12 chapters in this module
- Understanding auditor expectations and timelines
- Assembling audit packages in advance
- Coordinating stakeholder availability for audits
- Conducting mock audits to identify gaps
- Preparing teams for auditor interviews
- Responding to auditor questions accurately
- Addressing nonconformities efficiently
- Negotiating timelines for corrective actions
- Maintaining professionalism during audit process
- Documenting audit outcomes thoroughly
- Using audit results to enhance compliance posture
- Celebrating certification achievements appropriately
Module 6. Maintaining Continuous Compliance
Implement ongoing compliance practices that keep ISO 27001 controls effective between audits and adapt to changing conditions.
12 chapters in this module
- Scheduling regular control checks
- Updating risk assessments periodically
- Reviewing control effectiveness regularly
- Adjusting controls as business changes
- Monitoring for new regulatory requirements
- Incorporating lessons from incidents
- Conducting periodic policy reviews
- Ensuring staff awareness of updates
- Tracking compliance metrics over time
- Identifying improvement opportunities
- Planning for recertification audits
- Maintaining momentum after initial certification
Module 7. Managing Documentation and Records
Establish clear documentation practices that support compliance while minimizing administrative burden on delivery teams.
12 chapters in this module
- Identifying required ISO 27001 records
- Creating standardized document templates
- Setting document retention periods
- Storing documents securely and accessibly
- Controlling document versions effectively
- Ensuring document availability for audits
- Reducing documentation redundancy
- Integrating documentation with delivery tools
- Training teams on documentation standards
- Auditing documentation practices regularly
- Improving documentation efficiency over time
- Retiring obsolete documents appropriately
Module 8. Conducting Risk Assessments
Perform thorough risk assessments that inform control selection and demonstrate due diligence to auditors and regulators.
12 chapters in this module
- Understanding risk assessment requirements in ISO 27001
- Identifying assets to protect
- Determining asset values and criticality
- Identifying threats to information security
- Assessing vulnerability likelihood and impact
- Evaluating existing control effectiveness
- Determining residual risk levels
- Documenting risk treatment decisions
- Obtaining necessary approvals
- Updating risk assessments periodically
- Using risk assessments to prioritize actions
- Aligning risk assessments with business objectives
Module 9. Implementing Security Controls
Guide the implementation of key ISO 27001 controls within service delivery contexts, focusing on practical application.
12 chapters in this module
- Understanding control objectives and requirements
- Determining implementation approach for each control
- Assigning control ownership clearly
- Developing implementation plans
- Integrating controls into delivery processes
- Testing control effectiveness
- Documenting control implementation
- Training teams on control responsibilities
- Monitoring control performance
- Addressing control gaps
- Reviewing controls periodically
- Improving controls based on feedback
Module 10. Managing Third-Party Risks
Address risks from vendors and partners by implementing appropriate controls and monitoring their compliance.
12 chapters in this module
- Identifying third parties requiring security oversight
- Assessing third-party security posture
- Including security requirements in contracts
- Conducting third-party assessments
- Monitoring third-party compliance
- Managing third-party incidents
- Terminating relationships securely
- Documenting third-party risk management
- Aligning with client expectations
- Scaling oversight across multiple vendors
- Using automation for continuous monitoring
- Improving third-party risk processes
Module 11. Building Security Awareness
Foster a culture of security awareness across delivery teams to support compliance efforts.
12 chapters in this module
- Identifying awareness training needs
- Developing engaging training content
- Scheduling training delivery
- Conducting security briefings
- Promoting security policies effectively
- Measuring awareness effectiveness
- Addressing knowledge gaps
- Incorporating lessons from incidents
- Encouraging reporting of concerns
- Recognizing security champions
- Updating training content regularly
- Aligning awareness with business changes
Module 12. Continuous Improvement of the ISMS
Establish processes for ongoing improvement of the information security management system based on performance data and changing conditions.
12 chapters in this module
- Monitoring ISMS performance metrics
- Analyzing audit results for trends
- Gathering feedback from stakeholders
- Identifying improvement opportunities
- Planning improvement initiatives
- Implementing changes systematically
- Measuring improvement effectiveness
- Documenting improvement activities
- Communicating improvements widely
- Scaling improvements across teams
- Sustaining improvement momentum
- Aligning improvements with strategic goals
How this maps to your situation
- Initial ISO 27001 implementation in service delivery context
- Preparing for first certification audit
- Maintaining compliance between audits
- Scaling compliance across multiple client engagements
Before vs. after
Before
Spending excessive time reconciling compliance gaps across delivery teams, reacting to last-minute audit requests, and managing fragmented evidence workflows.
After
Owning end-to-end regulator-facing packages with reusable templates, reducing evidence cycles from 80+ hours to under 6, and becoming the first internal reference for audit escalations.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 9 hours total, designed to be completed in short sessions over a few weeks.
If nothing changes
Without a structured approach, compliance remains reactive and resource-intensive, increasing the likelihood of audit findings, regulatory scrutiny, and delivery delays due to last-minute evidence requests.
How this compares to the alternatives
Unlike generic compliance training, this course focuses specifically on the challenges of service delivery managers in global IT firms, with practical templates and workflows tailored to ISO 27001 evidence cycles and regulator-facing reviews.
Frequently asked
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is this course specific to my role?
Yes, it's designed specifically for service delivery managers in global IT services firms, with examples and templates reflecting real-world delivery challenges.
What if I'm not technical?
The course focuses on operational ownership and coordination, not technical implementation, making it accessible to managers without deep technical expertise.
$199 one-time. Approximately 9 hours total, designed to be completed in short sessions over a few weeks..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours