Live Online Executive Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Oct 26, 2026 · from USD 1,700
Ransomware, payment fraud, data leaks and supply chain compromise are no longer purely technical problems. They stop operations, trigger regulatory action and damage reputations, and boards are expected to ask the right questions. This ten-day programme prepares senior leaders to direct information security rather than delegate it blindly. The first half covers threat landscape and governance, cyber risk quantification, the structure of ISO/IEC 27001 and 27002, scoping, the statement of applicability, risk assessment and treatment, policies, and the role of leadership and accountability in an information security management system.
The second half goes deeper into technical and operational controls that leaders must understand, including access management, cloud and third-party risk, secure development, monitoring, incident response, business continuity, crisis communication, internal audit and certification readiness. Table-top simulations test your decisions under pressure. The course is intended for CEOs, directors, CIOs, CISOs, risk and compliance heads, internal auditors, legal counsel and senior managers in government, banks, telecoms, health and NGOs. It is delivered in the classroom, online or in-house with a CPD-accredited certificate. You return with a board-ready security roadmap.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Oct 26, 2026, Nov 23, 2026, Dec 21, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Digital services now sit at the centre of banking, government, healthcare, education and commerce, which makes information security a standing board-level concern. Attackers target the weakest link, whether that is an unpatched server, a supplier or a distracted employee, and regulators in many sectors expect documented governance, risk assessment and incident reporting. Executives who do not understand the basics cannot judge whether the organisation is protected or where to invest.
Executive Cybersecurity & Information Security (ISO 27001) Training Course gives senior leaders both the strategic and the practical picture. The programme opens with cyber threats, attacker methods and the business impact of incidents, then builds a working understanding of ISO/IEC 27001: context, leadership commitment, scope, risk assessment methodology, treatment plans, the statement of applicability and the Annex A control themes. Subsequent days examine identity and access, network and cloud security, vendor risk, awareness, data protection, vulnerability management, monitoring, incident response and recovery, resilience testing, metrics, audit and certification preparation.
Learning is deliberately interactive. Leaders take part in risk workshops, review sample policies and audit findings, run a ransomware table-top exercise and design a security roadmap with budget, ownership and reporting lines for their own organisation.
Training Objectives
By the end of the course, participants will be able to:
- Describe the cyber threat landscape and its business impact in plain terms.
- Define leadership responsibilities for information security governance and culture.
- Interpret the clauses of ISO/IEC 27001 and the control themes of ISO/IEC 27002.
- Set the scope of an information security management system and prepare a statement of applicability.
- Run an information security risk assessment and select appropriate treatments.
- Evaluate controls for identity, cloud, third-party and data protection risk.
- Direct incident response, crisis communication and business continuity arrangements.
- Plan internal audit, management review and readiness for ISO 27001 certification.
What you'll learn
Key Takeaways
Participants leave with:
- A board-level view of their organisation cyber risk and priorities.
- A draft scope statement and risk assessment approach for ISO 27001.
- An outline statement of applicability with control owners.
- A tested incident response and crisis communication plan.
- A set of questions and indicators for challenging security reports.
- A multi-year security roadmap with budget assumptions.
Training Methodology
The programme is designed for senior leaders with limited time and high accountability. It features:
- Executive briefings that translate technical subjects into business decisions
- Risk assessment and policy drafting workshops using a case organisation
- A full-day table-top simulation of a cyber crisis
- Review of sample audit reports, supplier questionnaires and board papers
- Peer exchange on governance models across sectors
Day 1: The Cyber Threat Landscape and Business Impact
- Attacker types, motives and common attack paths
- Ransomware, phishing, business email compromise and insider threats
- Case reviews of major breaches and their consequences
- Cyber risk as enterprise risk and its financial effect
- Regulatory and contractual drivers for security
- Exercise: assessing what the organisation could not afford to lose
Day 2: Security Governance and Leadership
- Roles of the board, executives and the security function
- Policies, standards and accountability structures
- Security culture, awareness and behaviour
- Budgeting and measuring return on security investment
- Cyber insurance and risk transfer
- Workshop: defining governance for an organisation
Day 3: ISO/IEC 27001 Foundations
- Structure and clauses of ISO/IEC 27001
- Context of the organisation, interested parties and scope
- Leadership commitment and the information security policy
- Objectives, resources, competence and documented information
- Integration with other management systems
- Exercise: drafting a scope and policy statement
Day 4: Information Security Risk Assessment and Treatment
- Asset identification and valuation
- Threats, vulnerabilities and risk analysis methods
- Risk acceptance criteria and treatment options
- Selecting controls and the statement of applicability
- Risk treatment plans and residual risk approval
- Lab: running a risk assessment on a sample business process
Day 5: Control Themes: People, Organisation and Physical
- ISO/IEC 27002 control themes overview
- Human resource security, screening and awareness
- Asset management, classification and handling
- Physical and environmental security
- Remote and hybrid working controls
- Review of control gaps in a case organisation
Day 6: Technical Controls for Decision Makers
- Identity, authentication and privileged access management
- Network security, segmentation and zero trust ideas
- Endpoint protection, patching and vulnerability management
- Cryptography and key management essentials
- Secure development and change management
- Security logging, monitoring and operations centres
Day 7: Cloud, Third-Party and Data Protection Risk
- Shared responsibility in cloud services
- Supplier and outsourcing risk assessment
- Contract clauses and assurance reports
- Data protection, privacy and breach notification duties
- Data classification, retention and disposal
- Exercise: reviewing a supplier security questionnaire
Day 8: Incident Response and Crisis Management
- Incident response lifecycle and team structure
- Detection, triage, containment and eradication
- Evidence handling and digital forensics basics
- Crisis communication with staff, regulators, customers and media
- Decision making on ransom demands and disclosure
- Table-top simulation: a ransomware attack
Day 9: Resilience, Continuity and Testing
- Business impact analysis and recovery objectives
- Backup strategy and disaster recovery design
- Business continuity plans and exercises
- Penetration testing, red teaming and assurance
- Metrics and dashboards for executive oversight
- Lab: building an executive security dashboard
Day 10: Audit, Certification and the Security Roadmap
- Internal audit of the management system
- Nonconformities, corrective action and continual improvement
- Management review inputs and outputs
- Stages of certification audit and preparation
- Building the multi-year security roadmap
- Presentations of roadmaps and course review
The programme is designed for people who are accountable for, or must challenge, information security decisions, including:
- Chief executives, managing directors and board members
- Chief information officers and chief information security officers
- Heads of risk, compliance and internal audit
- Chief operating and finance officers
- Legal counsel and data protection officers
- IT managers and security managers moving into leadership roles
- Senior officials in ministries, regulators and state corporations
- Directors of banks, telecoms, health providers and NGOs handling sensitive data
Participants who attend the full programme and take part in the simulations and workshops receive a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy. It recognises professional development and is not an ISO 27001 auditor qualification.
Choose Where You Want to Learn
Executive Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Executive Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Executive Cybersecurity & Information Security (ISO 27001) programme, you'll be able to describe the cyber threat landscape and its business impact in plain terms, define leadership responsibilities for information security governance and culture, interpret the clauses of iso/iec 27001 and the control themes of iso/iec 27002, and set the scope of an information security management system and prepare a statement of applicability. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is designed for people who are accountable for, or must challenge, information security decisions, including: Chief executives, managing directors and board members, Chief information officers and chief information security officers, Heads of risk, compliance and internal audit, Chief operating and finance officers, Legal counsel and data protection officers, IT managers and security managers moving into leadership roles, Senior officials in ministries, regulators and state corporations, and Directors of banks, telecoms, health providers and NGOs handling sensitive data.
Executive Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Executive Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Executive Cybersecurity & Information Security (ISO 27001) starts October 26, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Executive Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Executive Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Executive Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Executive Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Executive Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.