Information security management
Start with Advisera’s free, self-paced training on ISO/IEC 27001:2022. Learn how to define the scope of an information security management system (ISMS), assess risks and document which controls apply. The optional paid Foundations exam is taken online.
Advisera · English · 8 hours · Self-paced
Registration takes place on Advisera.
Who this course is for
A starting point for IT and security staff, compliance coordinators and people joining an ISO 27001 project. Advisera lists no prior implementation experience as a prerequisite.
What you’ll learn
Define the scope
Work out which services, teams and information need to be within the ISMS and who owns the decisions.
Assess information security risk
Follow the path from identifying and evaluating a risk to recording a treatment decision.
Use the Statement of Applicability
Understand how Annex A informs control selection and why the reasons for inclusion or exclusion matter.
Keep the ISMS working
See how internal audits, management review and corrective actions fit into the ongoing work.
Try an ISO 27001 risk assessment example
Pick one service your organisation relies on, such as a customer support platform. Sketch the information it holds, who can access it and one thing that could go wrong. As you study, use that example to connect scope, risk treatment and the evidence you would need to show that a control is working.
ISO 27001 Foundations exam
Paid exam See your local price at Advisera checkout
30 questions · 45 minutes · Online proctoring
Advisera uses multiple-choice and true/false questions. You need at least 50% in each competency and 70% in each competency unit. Allow 15 extra minutes for the system check. The exam purchase includes two retakes, and Advisera issues the certificate after you pass.
For the online proctored exam, prepare a computer with a webcam and microphone, a charged phone for the second camera angle and a quiet room. Read Advisera’s exam rules before booking.
Advisera handles payment, exam access and certificates.
Frequently asked questions
Is the ISO 27001 Foundations course free?
Yes. Advisera offers the self-paced course materials for free. You pay only if you choose to take the optional certification exam.
Do I need an IT or audit qualification first?
Advisera lists no prior implementation experience. An example from your own workplace can help you put the risk and control concepts into practice.
What does the certificate cover?
It is an individual credential issued by Advisera after you pass the Foundations exam. Certification of an organisation’s ISMS is a separate process.
Should I start with Foundations or Internal Auditor training?
Start with Foundations if you need to understand ISMS requirements, risks and controls. If you already know the standard and need to plan and run internal audits, look for training focused on auditing.
Sources: ISO/IEC 27001:2022 and Advisera’s course syllabus and exam terms.