All ISO 27001 training

New to information security or ready to build on your ISO 27001 knowledge? Explore ISO Specialist Academy’s training courses below, from the basics and security awareness to internal auditing and implementing and managing an Information Security Management System (ISMS).

Our practical training helps you understand ISO 27001 and apply it in your business. Build the skills to manage risks, protect information and support certification, while creating a stronger, more resilient business.

What we can do for you

Enter at the level that fits your role and experience. All prices are per learner.

Introduce every employee to the fundamentals of cybersecurity and the role they play in protecting your organisation's information.

R914 ½ day · 2–3 hours Live virtual workshop or self-paced All employees
View course outline

What's covered

  • What is cybersecurity?
  • Common cyber threats
  • Phishing and social engineering
  • Passwords and authentication
  • Safe use of devices and systems
  • Data protection
  • Incident reporting
  • Employee responsibilities
  • Introduction to ISO 27001
Format: 2–3 hours. Delivered as a live virtual workshop or as a short self-paced online course.
Outcome: Employees understand basic cybersecurity risks and how their behaviour contributes to information security.

A practical understanding of ISO 27001 and Information Security Management Systems: what the standard requires and what implementation involves.

R2,869 1 day · 5–6 hours Live virtual sessions Owners, managers, IT & compliance teams
View course outline

Module 1 — ISO 27001 Fundamentals

  • What is ISO 27001?
  • Why organisations implement it
  • What is an ISMS?
  • Confidentiality, integrity and availability

Module 2 — Understanding the Standard

  • ISO 27001 structure and requirements
  • Context and leadership
  • Planning, support and operation
  • Performance evaluation and improvement

Module 3 — Information Security Risk

  • Identifying risks
  • Risk assessment
  • Risk treatment
  • Introduction to Annex A controls

Module 4 — Certification

  • Certification process
  • Audit stages
  • Preparing for certification
  • Maintaining certification
Format: Approximately 5–6 hours, delivered in one day or split into shorter sessions if required.
Outcome: Learners understand what ISO 27001 requires and what implementation involves.

Learn how to establish and begin implementing an ISO 27001 management system, from scope and risk assessment to Annex A controls and internal audit.

R6,894 2-day equivalent · over 2 weeks 9 live virtual sessions + assignment ISMS coordinators, IT & compliance
View course outline

Week 1 — Build the Foundation

  • ISMS Foundations (60 min)
  • Context & Scope (60 min)
  • Leadership & Responsibilities (90 min)
  • Risk Assessment (90 min)
  • Risk Treatment & Statement of Applicability (90 min)

Week 2 — Implement & Prepare

  • Annex A Controls (90 min)
  • Documentation & Operations (60 min)
  • Monitoring, Internal Audit & Management Review (60 min)
  • Non-conformities & Continual Improvement (60 min)

Practical assignment (2–3 hours)

  • Begin building an ISMS using your own organisation or a case study
Format: Approximately 10–12 hours of learning over two weeks.
Outcome: Learners understand how to establish and begin implementing an ISO 27001 management system.

A professional programme that gives you the knowledge and practical capability to lead a full ISO 27001 implementation project through to certification.

R17,244 4-day equivalent · 4–6 weeks Virtual programme + workshop Project leads, ISMS managers, consultants
View course outline

Week 1 — Plan

  • ISMS implementation planning
  • Project planning, roles and responsibilities
  • Context, interested parties and ISMS boundaries

Week 2 — Assess

  • Risk identification, analysis and evaluation
  • Risk register
  • Treatment plans, control selection and SoA

Week 3 — Implement

  • Annex A control categories
  • Policies, procedures, technical and organisational controls
  • Competence, awareness, communication and change management

Week 4 — Measure & Improve

  • Monitoring, measurement and KPIs
  • Internal audit and management review
  • Corrective action and Stage 1 & 2 audit readiness

Week 5 — Practical Application

  • Implementation workshop (2–3 hours)
  • Scope → Risk → Treatment → SoA → Controls → Audit → Improvement

Week 6 — Assessment

  • Final assessment
  • Practical presentation / case study
  • Feedback and completion
Format: Approximately 20–24 guided hours plus practical assignments.
Outcome: Learners develop the knowledge and practical capability to lead an ISO 27001 implementation project.

Develop the knowledge and practical skills to plan, conduct, report on and lead ISO 27001 audits, including first-, second- and third-party audits.

R20,684 5-day equivalent · 5–6 weeks Virtual programme + audit simulation Internal & external auditors, consultants
View course outline

Week 1 — Audit Foundations

  • Audit principles
  • ISO 27001 requirements
  • Auditor responsibilities
  • Audit planning and programme

Week 2 — Audit Preparation

  • Scope, objectives and criteria
  • Audit plans and evidence requirements
  • Preparing audit questions

Week 3 — Conducting the Audit

  • Interview techniques
  • Gathering objective evidence and sampling
  • Assessing controls
  • Identifying findings and non-conformities

Week 4 — Reporting

  • Writing audit findings and reports
  • Corrective actions
  • Follow-up audits and closing findings

Week 5 — Leading the Audit

  • Leading an audit team
  • Managing the audit process
  • First-, second- and third-party audits
  • Practical audit simulation

Week 6 — Assessment

  • Practical audit exercise
  • Final assessment
  • Feedback and completion
Format: Approximately 25–30 guided hours plus a practical assessment.
Outcome: Learners develop the knowledge and practical skills required to conduct and lead ISO 27001 audits.
Academy learning journey

Your ISO 27001 learning path

Start where you are. Everyone begins with awareness and the introduction, practitioners move on to implementation, and professionals choose Lead Implementer or Lead Auditor.

CourseTimeStructurePrice
Cyber Awareness½ day2–3 hoursR914
ISO 27001 Introduction1 day5–6 hoursR2,869
ISO 27001 Implementation2 days2 weeks / 10–12 hoursR6,894
ISO 27001 Lead Implementer4 days4–6 weeks / 20–24 hoursR17,244
ISO 27001 Lead Auditor5 days5–6 weeks / 25–30 hoursR20,684
How you learn

Designed around real working lives

All our training is currently delivered virtually, in live online sessions you can join from anywhere. Every course follows the same practical five-step model.

LEARN

Short, focused lessons

15–30 minutes

APPLY

Practical exercises

30–90 minutes

CONNECT

Live facilitator workshops

60–120 minutes

BUILD

Real-world output

Create something relevant to your own organisation

ASSESS

Check your progress

Knowledge check or practical assessment

What you'll take away

The strength of our training is the combination of practice, interaction and direct applicability. After your course you'll:

  • apply ISO 27001 directly to your own organisation
  • understand the requirements through real-world cases
  • have templates and tools ready to use
  • feel confident in your information security role
  • be able to explain the ISMS to management and colleagues
ISO Specialist trainer presenting

Which training is right for me?

Want everyone to work securely? Start with Cyber Awareness for all staff, followed by the ISO 27001 Introduction for the people involved in your ISMS.

Responsible for setting up the ISMS? The Implementation course takes you from scope and risk assessment to controls and internal audit in two weeks.

Leading the project or auditing it? Choose Lead Implementer to run the full certification project, or Lead Auditor to plan and lead ISO 27001 audits.

Not sure which fits your role or learning goals? Request a quote or book a call with Sam, our training coordinator.

Two participants working on laptops

Support during and after your training

Your facilitator stays available while you put the theory into practice. Bring the challenges you meet in your own ISMS to the live workshops, learn from fellow participants and ask questions via our helpdesk, also once the course has finished.

Participants working together
↗ Get certification done

We are ISO Specialist Academy

We believe training only has value if you can apply it the very next day. That's why you won't get dry theory from us, but practice-oriented training you can put to work in your organisation immediately.

Our trainers are consultants who guide organisations every day in quality, health and safety, environment and information security. They know what businesses face and translate complex standards into clear, practical steps.

Whether you need to understand a standard, run an internal audit or lead an implementation, our courses give you the knowledge and confidence to do it yourself, with personal attention and room for your questions throughout.

Get certification done.

Get to know us
ISO Specialist trainer
ISO Specialist consultant
ISO Specialist team member

Personal advice?

Have a question or want a free quote? Fill in the form and we'll contact you within 1 business day.

ISO Specialist team discussing a project

Search

Powered by Joinchat