ISO/IEC 27001 Foundation

The ISO/IEC 27001 Foundation training is all about an international standard that lays the foundation for effective management of confidential and sensitive information, and for the application of security controls to information.  

The content of the ISO/IEC Foundation training accredited by APMG is designed in such a way that the candidate gains good knowledge about the content and learns the high level requirements of the ISO/IEC 27001 standard. The candidate also learns to understand at foundation level how this standard functions within an organization.

Anyone who implements, supports, and maintains the Information Security Management System within an organization. Anyone within an organization who is involved in an audit of the ISMS. Anyone who works with the ISMS within an organization.

There is no pre-requisite for the Foundation qualification, but a background in information security or service management is an advantageous starting point.

The level of the ISO/IEC 270001 Foundation course is MBO+.

the ISO/IEC 27001 Foundation course takes 3 days in total

subjects ISO/IEC 27001 foundation course day 1

• module 1: introduction, background and definitions
• module 2: main publications
• module 3: leadership and support of the ISMS

subjects ISO/IEC 27001 foundation course day 2

• module 4: planning and operation of the ISMS
• module 5: Information security control
  objectives and controls
• module 6: obtaining ISO/IEC certification

subjects ISO/IEC 27001 foundation course day 3

• Repeat day 1 & 2
• mock exam
• take a real exam

General overview of ISO/IEC 27001 and related best practices, standards and schemes. Leadership and commitment to the ISMS. Planning and implementation Information security management tools and controls.

information about the ISO/IEC 27001 Foundation Exam

APMG: 50 multiple choice exam questions in 40 minutes. Passed with at least 50% score Closed book. English speaking.

More information can be found at APMG.

The following topics are covered during the ISO/IEC 27001 Foundation training:

• Information Security Management System
• the responsibility of management
• ISMS internal audits
• management review of the ISMS
• improvement of the ISMS
• objectives of controls and the controls themselves
• The exam can optionally be taken on the last day of class.

ISO/IEC 27001 provides a model for establishing, implementing, implementing, assessing, maintaining and improving an information security management system that is designed and implemented according to the needs of the organization, its objectives, its value information, its security requirements, its work process and other organizational characteristics.

For other ISO training courses, please see the overview page Quality & Safety, examples are the ISO/IEC 27001 Auditor of ISO/IEC 27001 practitioner - information security officer training.

The APMG International ISO/IEC 27001 and Swirl Device logo is a trademark of The APM Group Limited, used under permission of The APM Group Limited. All rights reserved.