You have decided to implement the ISMS. Now you want to understand the steps you need to take.

You have identified the key players you want on your ISMS team. You have established certain key elements, but not your scope. You have not yet decided on your implementation schedule or selected your registrar.

To take advantage of everything our comprehensive approach offers, we recommend your team complete all four Tracks of our curriculum. This is the best way to ensure they learn every step required to implement all the core aspects of the ISMS and to achieve ISO 27001 certification.

You have begun the process, but you want to make sure you are on the right path.

1. Your team has a good understanding of ISO 27001:2022 requirements;
2. You have defined and approved your ISMS scope;
3. Your business process owners have a good understanding of the ISMS requirements.

We recommend that your team complete Tracks 2, 3 and 4 of our curriculum. Our process approach driven methodology will give team members the necessary coverage of all requirements. They will be trained to work with a comprehensive risk assessment and treatment methodology that is fully aligned with the standard requirements (Track 3). Our hands-on review of the Certification process is covered in Track 4, during which your team works in collaboration with our experts to ensure that all the requirements of the standard are attended to in preparation for the certification audit.

You have already implemented the core ISMS functions and put the majority of Annex controls in place. You want to complete the final steps before going into certification mode.

You have built a functional security management system that covers ISO 27001:2013 clauses and takes your SoA controls into account. You have aligned the scope of your ISMS with your business objectives. Your key stakeholders are on-board with the implementation. You have not adopted a risk management methodology for the ISMS.

We recommend that your team complete Tracks 3 and 4 of our curriculum to ensure your ISMS meets risk assessment requirements. By completing Track 4, your team will ensure full alignment with the requirements of the standard. Team members will also collaborate with our experts while preparing the certification audit. Track 4 is a mentored, hands-on course.

You have completed the ISMS implementation. Now you just need to make sure you get through the certification assessment.

You already have a functional ISMS. You have scheduled the Stage 1 audits with the registrar, and:

1. You have completed the risk assessment according to the established methodology.
2. You have identified risks and created treatment plans according to the established risk acceptance criteria.

We recommend that your team complete Track 4 of our curriculum to ensure full alignment with the requirements of the standard and go through the practical steps of preparing the certification audit under the mentorship of our experts.