Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course in Dodoma, Tanzania
Classroom training in Dodoma · next cohort Oct 26, 2026 · from USD 3,600
Ransomware, phishing, stolen credentials and careless data handling now threaten every organisation that runs on digital systems, from banks and hospitals to schools and county offices. Technical tools alone do not solve the problem; people, processes and governance matter as much. Ten days build understanding from first principles to a working management system. The first half covers the security landscape, the CIA triad, threat actors, malware, social engineering, network and endpoint defence, cryptography, identity and access management, cloud security, secure configuration, logging and incident response.
The second half turns to ISO/IEC 27001: context and scope, leadership, risk assessment and treatment, the Statement of Applicability, Annex A controls, documented information, awareness, monitoring, internal audit, management review and corrective action. Labs and tabletop exercises reinforce each topic. IT officers, system and network administrators, security analysts, risk and compliance staff, auditors, data protection officers and managers who are new to security will benefit. Training is offered in the classroom, online or in-house, with a CPD-accredited certificate. You finish able to protect systems and contribute to an ISMS project.
At a Glance
Training in Dodoma, Tanzania
Dodoma is Tanzania's capital and seat of Parliament, where most government ministries are now based.
More about training in Dodoma →- Format
- Classroom, in Dodoma
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 3,600
- Next start dates
- Oct 26, 2026, Nov 23, 2026, Dec 21, 2026
- Certificate
- Certificate of Completion
- Getting there
- Standard gauge railway from Dar es Salaam, or domestic flights to Dodoma Airport (DOD)
- Time zone
- East Africa Time (UTC+3)
- Currency
- Tanzanian shilling (TZS). Fees are listed in USD.
About this course
Information is now among the most valuable and most exposed assets an organisation holds. Breaches interrupt services, expose customers' personal data, trigger regulatory action and damage trust that took years to build. Boards, donors and clients increasingly ask for evidence that security is managed systematically, and ISO/IEC 27001 has become the common way to provide it.
The Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course gives beginners a thorough ten-day grounding in both the technology and the management system. Early days build core knowledge: how attacks work, how networks, operating systems and applications are hardened, how encryption and authentication protect data, and how monitoring and incident response limit damage. Participants practise in a lab environment with scanning, password and access control exercises, log review and a simulated incident.
The later days follow the structure of ISO/IEC 27001. Participants define scope, identify assets and risks using a recognised method, select and justify controls from Annex A, draft key policies and procedures, and plan awareness, business continuity and supplier security. The final days cover internal audit technique, nonconformities, management review and preparation for an external certification audit. Participants complete an integrated case project that produces a risk register, a Statement of Applicability and an audit report for a fictional organisation.
Training Objectives
By the end of the course, participants will be able to:
- Explain core cybersecurity concepts, common threats and attack techniques.
- Apply layered defences to networks, endpoints, applications and cloud services.
- Use encryption, authentication and access control to protect information.
- Detect and respond to security incidents following a defined process.
- Describe the structure, clauses and purpose of ISO/IEC 27001.
- Carry out an information security risk assessment and risk treatment plan.
- Select Annex A controls and prepare a Statement of Applicability.
- Plan and conduct an internal ISMS audit and report nonconformities.
What you'll learn
Key Takeaways
Participants complete the programme with:
- A working vocabulary of cybersecurity threats, controls and tools.
- A hardening checklist for servers, workstations and network devices.
- A completed asset inventory, risk register and risk treatment plan from the case project.
- A Statement of Applicability linking controls to identified risks.
- Draft policies for access control, incident management and acceptable use.
- An internal audit programme, checklist and report template.
- A step-by-step roadmap to take an organisation towards ISO 27001 certification.
Training Methodology
Because the content spans technical and management topics, delivery alternates between demonstration and practice. Participants experience:
- Hands-on labs in a safe environment for scanning, hardening and log review
- A tabletop incident simulation with assigned team roles
- An integrated ISMS case project running through the second week
- Worked examples of risk registers, policies and audit reports
- Mock internal audit interviews and feedback from the facilitator
Day 1: The Information Security Landscape
- Confidentiality, integrity and availability
- Threat actors, motives and common attack paths
- Vulnerabilities, exploits and the cyber kill chain
- Typical breaches and their business impact
- Security roles, terminology and frameworks overview
Day 2: Threats, Malware and Social Engineering
- Viruses, ransomware, spyware and botnets
- Phishing, vishing, smishing and business email compromise
- Insider threats and human factors
- Password attacks and credential theft
- Security awareness programme design
- Lab: analysing phishing emails
Day 3: Network and Endpoint Security
- TCP/IP basics and common protocols
- Firewalls, segmentation, VPNs and wireless security
- Intrusion detection and prevention
- Endpoint protection, patching and secure configuration
- Mobile device and remote work security
- Lab: network scanning and firewall rule review
Day 4: Cryptography, Identity and Access Management
- Symmetric and asymmetric encryption, hashing and digital signatures
- Public key infrastructure and certificates
- Authentication factors and multi-factor authentication
- Role-based access, least privilege and privileged accounts
- Joiner, mover and leaver processes
- Lab: configuring access controls and encryption
Day 5: Application, Cloud and Data Security
- Common web vulnerabilities and the OWASP Top 10
- Secure development and change control
- Cloud shared responsibility and configuration risks
- Data classification, backup and data loss prevention
- Privacy and personal data protection principles
- Case discussion: a cloud storage misconfiguration
Day 6: Monitoring, Incident Response and Resilience
- Logging, SIEM concepts and security monitoring
- Incident response lifecycle and team roles
- Digital forensics basics and evidence handling
- Business continuity and disaster recovery planning
- Vulnerability and penetration testing overview
- Tabletop exercise: responding to a ransomware incident
Day 7: ISO/IEC 27001 and the ISMS
- Structure of ISO/IEC 27001 and related standards in the 27000 family
- Context of the organisation, interested parties and scope
- Leadership, information security policy and responsibilities
- Plan-Do-Check-Act applied to the ISMS
- Benefits and costs of certification
- Workshop: defining ISMS scope for a case organisation
Day 8: Risk Assessment and Treatment
- Asset identification and valuation
- Threat and vulnerability analysis
- Risk methods: qualitative, quantitative and ISO/IEC 27005 concepts
- Risk acceptance criteria and treatment options
- Producing a risk register and treatment plan
- Practical: assessing risks for the case organisation
Day 9: Annex A Controls and Documentation
- Organisational, people, physical and technological control themes
- Selecting controls and writing the Statement of Applicability
- Supplier and third-party security
- Required policies, procedures and documented information
- Competence, awareness and communication
- Practical: drafting policies and the Statement of Applicability
Day 10: Audit, Review and Certification Readiness
- Performance evaluation, metrics and monitoring
- Internal audit planning, sampling and evidence gathering
- Nonconformities, corrective action and continual improvement
- Management review inputs and outputs
- Stage 1 and stage 2 certification audits explained
- Presentation of the integrated case project and action plan
The course is designed for beginners and early-career professionals who need to understand or support information security, including:
- IT officers, system administrators and network engineers
- Security analysts and helpdesk staff moving into security
- Information security and risk managers
- Compliance, privacy and data protection officers
- Internal and external auditors
- Business analysts and project managers on digital projects
- Software developers and database administrators
- Managers in banks, telecoms, health, government and NGOs who own information assets
Participants who attend the ten days and complete the lab work and case project receive a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy.
The certificate confirms completion of this training programme. It is not itself an ISO 27001 auditor registration.
Choose Where You Want to Learn
Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course Venues
TanzaniaDodomaNext Oct 26· 13 dates$3,600Viewing- TanzaniaArushaNext Nov 9· 13 dates$3,800
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course in Dodoma
Everything you need to know about this course before you register.
Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Dodoma, Tanzania, in Monday-to-Friday cohorts that start every four weeks. The venue, daily timings and joining details are sent in your Joining Instructions email ahead of the start date.
The next Dodoma cohort starts on October 26, 2026, and a new intake follows every four weeks. Pick a date under "Upcoming sessions in Dodoma" above and click Register; your seat is confirmed once payment or a signed purchase order is received.
The classroom fee for Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course in Dodoma is USD 3,600 per delegate, covering tuition and course materials. Register 3 or more delegates together and a 5% team discount is applied automatically.
Yes. Besides Dodoma, Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Arusha, Dar es Salaam, and Zanzibar. It also runs as live online training you can join from anywhere in Tanzania, and in-house at your organisation's own premises.
Yes — Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course can be delivered at your offices in Dodoma or at a venue you choose, on dates that suit your team, with case studies tailored to your sector. Message our training advisors to request a proposal.
By the end of the Fundamentals of Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain core cybersecurity concepts, common threats and attack techniques, apply layered defences to networks, endpoints, applications and cloud services, use encryption, authentication and access control to protect information, and detect and respond to security incidents following a defined process. The full breakdown of topics is covered session by session in the Course Outline tab above.
The course is designed for beginners and early-career professionals who need to understand or support information security, including: IT officers, system administrators and network engineers, Security analysts and helpdesk staff moving into security, Information security and risk managers, Compliance, privacy and data protection officers, Internal and external auditors, Business analysts and project managers on digital projects, Software developers and database administrators, and Managers in banks, telecoms, health, government and NGOs who own information assets.
Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course is pitched at beginner professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Related Training
More Computing and Information Technology Courses in Tanzania
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Training in Dodoma
Other Courses Running in Dodoma, Tanzania
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Fundamentals of Cybersecurity & Information Security (ISO 27001) Training Course in Tanzania or browse every course running in Dodoma.