This course teaches attendees the foundations of the ISO/IEC 27001 standard and how it operates within an organisation. It is aimed at those are are: 

• Supporting the implementation, operation or maintenance of an organisational ISMS 
• Need to have a foundational level of knowledge 
• Working at an organisation that has an ISMS
•  Preparing for the ISO/IEC Practitioner – Information Security Officer or Auditor qualifications

•  The scope and purpose of ISO/IEC 27001 and how it can be used
• The key terms and definitions used in the ISO/IEC 27000 series 
• The fundamental requirements for an ISMS in ISO/IEC 27001 and the need for continual improvement 
• The processes, their objectives and high-level requirements 
• Applicability and scope definition requirements 
• Use of controls to mitigate IS risks 
• The purpose of internal audits and external certification audits, their operation and the associated terminology 
• The relationship with best practices and with other related International Standards: ISO 9001 and ISO/IEC 2000

Format of the Exam

• Multiple choice format
• 50 questions per paper 
• 25 marks or more required to pass (out of 50 available) – 50%
• 40 minutes
• Closed book