ISO/IEC 27001 Practical Implementation Masterclass

Overview

A practical, hands-on masterclass that turns ISO/IEC 27001 requirements into a working Information Security Management System. Executives and technical staff learn side by side, each making the decisions that fit their role. Over three days, they work through the same realistic scenarios, from the first risk assessment to a mock audit.

Who should attend

• CIOs and IT Managers
• IT Operations and Security Teams
• Risk Owners
• Compliance Professionals

What you will learn

• Define ISMS scope, governance, interested parties and accountable owners.
• Apply a repeatable risk assessment and treatment approach linked to business priorities.
• Select and justify controls using Annex A and ISO/IEC 27002 guidance, and build a defensible Statement of Applicability.
• Implement and validate identity, endpoint, cloud, data protection, monitoring and incident response controls.
• Document operating evidence, run an internal audit simulation and manage corrective actions.
• Present a board-ready, prioritised 90-day ISMS implementation plan.

How it works

• Role-based tasks for leadership and technical participants
• Hands-on labs covering identity, endpoints, data protection and incident response
• A mock internal audit run by another team
• A final briefing presenting your plan to leadership

What you take away

• Risk register and risk treatment plan
• Statement of Applicability
• Control evidence
• Audit findings and corrective actions
• A 90-day implementation roadmap
• Editable templates to adapt for your organisation

Assessment and certificate

• Practical exercises, a final project, a knowledge check and a short presentation
• Pass mark: 70%
• Successful participants receive a Digilink completion certificate. This is not an accredited ISO certification.

What to bring

• A laptop with Office-compatible applications.