ISO 27001 Foundation

ISO 27001 Foundation Outline

Module 1: Introduction to ISO 27001 

• Introduction 

• Compatibility with Other Management System Standards 

• ISO 27001:2022 and Its Clauses 
   

Module 2: Information Security 

• What is Business? 

• Industries 

• Risk 

• SWOT Analysis 

• Constructs and Characteristics of Assets 

• Security and Privacy 

• Triad of Information Security 

• Cyber Security is Everyone’s Responsibility 

• Cybersecurity Landscape 

• What is Information Security? 

• Information Security Management 

• Need of Information Security 

• Threats to Information Security 

• Active and Passive Attacks 
   

Module 3: Context of the Organisation 

• Understanding the Organisation and Its Context 

• Understanding the Needs and Expectations of Interested Parties 

• Determining the Scope of the Information Security Management System 

• Information Security Management System 
   

Module 4: Leadership 

• Leadership and Commitment 

• Policy 

• Organisational Roles, Responsibilities, and Authorities 
   

Module 5: Planning 

• Organisational Roles, Responsibilities, and Authorities 

• Information Security Objectives and Planning to Achieve Them 

• Planning of Changes 
   

Module 6: Support 

• Resources 

• Competence 

• Awareness 

• Communication 

• Documented Information 
   

Module 7: Operation 

• Operational Planning and Control 

• Information Security Risk Assessment 

• Information Security Risk Treatment 

• Drafting Reports and Test Plans 

What You’ll Learn in this Course

This course takes you from understanding the fundamentals of ISO 27001 to applying essential ISMS principles that safeguard organisational data. Each stage enhances your ability to maintain information security and compliance effectively. 
 

• Learn the key concepts and structure of ISO 27001 and ISMS 

• Learn how to identify and manage information security risks 

• Learn the roles and responsibilities involved in maintaining ISMS compliance 

• Learn how ISO 27001 supports legal and regulatory data protection requirements 

• Learn to implement continuous improvement in information security management 

• Learn how to build a culture of security awareness within organisations

ISO 27001 Foundation Exam Information

To achieve the ISO 27001 Foundation certification, candidates must successfully pass an examination that evaluates their understanding of ISMS principles and ISO 27001 requirements. The format of the exam is as follows:

Question Type: Multiple Choice  

Total Questions: 30  

Total Marks: 30 Marks  

Pass Mark: 50%, or 15/30 Marks  

Duration: 40 Minutes

Open Book/ Closed Book: Closed Book