Live Online Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Nov 2, 2026 · from USD 1,700
Ransomware, phishing, insider misuse and supplier breaches now threaten the continuity of banks, hospitals, governments and growing businesses alike, and customers and regulators expect proof that information is protected. Ten days give security professionals a structured way to deliver it. The first week builds the management system: context and scope, leadership, information security policy, asset inventory, risk assessment and treatment, the Statement of Applicability and the controls of ISO/IEC 27001:2022 Annex A, supported by ISO 27002 guidance. The second week moves into technical and operational practice: network and endpoint security, identity and access management, cryptography, vulnerability management, cloud security, logging and monitoring, business continuity, incident response, forensics basics and supplier assurance.
The programme closes with internal audit, management review, certification audit preparation and a simulated incident exercise. CISOs, IT and security managers, system and network administrators, risk, compliance and internal audit staff, data protection officers and consultants will find the depth they need. Sessions run in the classroom, online or in-house and end with a CPD-accredited Certificate of Completion. Afterwards you can lead an ISMS implementation and defend your decisions to auditors.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Nov 2, 2026, Nov 30, 2026, Dec 28, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Information is now the asset most organisations cannot afford to lose, and attackers have industrialised the ways of taking it. Phishing kits, credential theft, ransomware and misconfigured cloud storage affect small enterprises as readily as multinationals, and a single incident can interrupt services, expose personal data and damage reputation for years. A recognised management system gives organisations a repeatable way to decide what to protect, how, and how well it is working.
This ten-day training course combines the governance discipline of ISO/IEC 27001 with practical cybersecurity skills. In the first week participants build an information security management system from the ground up: determining scope and interested parties, setting policy and objectives, assigning roles, assessing risk with a recognised methodology, selecting controls and documenting the Statement of Applicability. The second week deepens technical coverage, with sessions on network architecture, secure configuration, access control, cryptography, vulnerability and patch management, security monitoring, secure development and cloud services. It then turns to resilience: incident response, digital evidence handling, backup and recovery, and supplier risk.
Throughout, participants work with a case organisation, producing the documents and records an auditor expects. Technical labs, tabletop exercises and an internal audit simulation give the programme a practical edge, and participants finish with a complete implementation plan.
Training Objectives
By the end of the course, participants will be able to:
- Explain the clauses and Annex A controls of ISO/IEC 27001 and their intent.
- Define ISMS scope, context, policy and objectives with senior management support.
- Carry out an information security risk assessment and produce a risk treatment plan.
- Prepare a Statement of Applicability and the mandatory documented information.
- Apply technical controls for networks, endpoints, identities, data and cloud services.
- Establish vulnerability management, logging and monitoring processes.
- Plan and test incident response, business continuity and recovery arrangements.
- Conduct internal audits and management reviews, and prepare for certification.
What you'll learn
Key Takeaways
Participants leave with:
- A scoped ISMS framework and policy set drafted for a case organisation.
- A completed risk register with treatment decisions and owners.
- A Statement of Applicability mapped to Annex A controls.
- A technical hardening and monitoring checklist for core systems.
- An incident response playbook tested in a tabletop exercise.
- An internal audit programme and a certification readiness plan.
Training Methodology
The programme combines management system design with hands-on security practice. It uses:
- A case organisation carried through the full ISMS build
- Technical labs on hardening, access control and scan analysis
- Risk assessment workshops using a shared register
- A tabletop incident simulation and internal audit role-play
- Templates for policies, the Statement of Applicability and audit records
Day 1: Cybersecurity Landscape and ISO 27001 Overview
- Threat actors, attack methods and recent breach patterns
- Confidentiality, integrity and availability
- The ISO/IEC 27000 family and the 2022 revision
- Structure of ISO 27001: clauses 4 to 10 and Annex A
- Benefits, costs and certification path
- Case organisation briefing
Day 2: Context, Leadership and Scope
- Understanding the organisation and interested parties
- Legal, regulatory and contractual requirements
- Defining ISMS scope and boundaries
- Leadership commitment, roles and responsibilities
- Information security policy and objectives
- Exercise: scoping the case organisation
Day 3: Asset Management and Risk Assessment
- Information asset inventory and classification
- Risk assessment methods and ISO 27005 principles
- Identifying threats, vulnerabilities and impacts
- Risk criteria, likelihood and risk evaluation
- Building the risk register
- Exercise: assessing risks for key assets
Day 4: Risk Treatment and the Statement of Applicability
- Risk treatment options and residual risk acceptance
- Selecting controls from Annex A and ISO 27002
- Writing the Statement of Applicability
- Risk treatment plan and ownership
- Mandatory documented information and records
- Exercise: producing the Statement of Applicability
Day 5: Organisational and People Controls
- Policies, segregation of duties and information transfer
- Human resource security: screening, terms and exit
- Security awareness, training and phishing simulation
- Physical and environmental security
- Remote working and mobile device controls
- Workshop: designing an awareness programme
Day 6: Network and Endpoint Security
- Secure network architecture and segmentation
- Firewalls, intrusion detection and prevention
- Endpoint protection and secure configuration baselines
- Malware and ransomware defence
- Email and web security controls
- Lab: hardening a server and reviewing firewall rules
Day 7: Identity, Cryptography and Data Protection
- Identity and access management, least privilege and multi-factor authentication
- Privileged access and password management
- Cryptography, key management and certificates
- Data loss prevention and information deletion
- Privacy and personal data protection alignment
- Lab: designing an access control model
Day 8: Vulnerability, Monitoring and Secure Operations
- Vulnerability scanning, patching and penetration testing
- Logging, SIEM and security monitoring use cases
- Secure development lifecycle and change management
- Cloud security responsibilities and configuration review
- Supplier and third-party security assurance
- Lab: interpreting scan results and prioritising fixes
Day 9: Incident Response and Continuity
- Incident response lifecycle and team structure
- Detection, containment, eradication and recovery
- Digital evidence handling and basic forensics
- Backup, disaster recovery and business continuity testing
- Notification duties and communication during incidents
- Tabletop exercise: a ransomware incident
Day 10: Audit, Review and Certification Readiness
- Monitoring, measurement and security metrics
- Internal audit planning and execution
- Management review inputs and outputs
- Nonconformities, corrective action and continual improvement
- Stage 1 and Stage 2 certification audit preparation
- Implementation roadmap and course review
The programme is intended for people who design, run, assure or audit information security, including:
- Chief information security officers and information security managers
- IT managers and heads of infrastructure
- Network, systems and cloud administrators
- Security analysts and operations centre staff
- Risk, compliance and internal audit professionals
- Data protection officers and privacy managers
- Business continuity and disaster recovery managers
- Consultants preparing clients for ISO 27001 certification
- Software engineering and DevOps leads responsible for secure delivery
Participants who attend all ten days and complete the labs and workshops are awarded a CPD-accredited Certificate of Completion by Vision Reach Global Consultancy.
Choose Where You Want to Learn
Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Best Practices in Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain the clauses and annex a controls of iso/iec 27001 and their intent, define isms scope, context, policy and objectives with senior management support, carry out an information security risk assessment and produce a risk treatment plan, and prepare a statement of applicability and the mandatory documented information. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is intended for people who design, run, assure or audit information security, including: Chief information security officers and information security managers, IT managers and heads of infrastructure, Network, systems and cloud administrators, Security analysts and operations centre staff, Risk, compliance and internal audit professionals, Data protection officers and privacy managers, Business continuity and disaster recovery managers, Consultants preparing clients for ISO 27001 certification, and Software engineering and DevOps leads responsible for secure delivery.
Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Best Practices in Cybersecurity & Information Security (ISO 27001) starts November 2, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Best Practices in Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.