Live Online Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Oct 26, 2026 · from USD 1,700
Breaches, ransomware and regulatory penalties have moved information security from the server room to the boardroom, and the people who lead it are judged on outcomes rather than tools. Chief information security officers and their managers must align security with strategy, justify budgets, motivate teams and demonstrate control effectiveness. This ten-day programme develops that leadership capability on the foundation of ISO/IEC 27001.
The first five days cover security governance, context and stakeholder analysis, information security policy, risk assessment and treatment, the Statement of Applicability and the Annex A controls, supplier and cloud risk, and awareness. The second five days turn to performance: security operating models, key risk and performance indicators, maturity assessment, internal audit, management review, business continuity, incident response and crisis leadership, building and retaining teams, and preparing for certification audit. Exercises include a risk workshop, a board briefing and a tabletop incident. The programme is aimed at CISOs, information security managers, IT directors, risk and compliance leaders, data protection officers, internal auditors and senior engineers moving into management in banks, telecoms, government and enterprise. Classroom, online and in-house delivery lead to a CPD-accredited certificate. Afterwards you can direct an ISMS and speak credibly with executives.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Oct 26, 2026, Nov 23, 2026, Dec 21, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Cyber incidents now disrupt operations, expose customer data and draw regulatory attention, and executives expect their security leaders to explain risk in business terms. Technical knowledge alone is not enough. Leaders must build a management system, prioritise limited resources, measure whether controls work and keep a team engaged under constant pressure.
The programme combines ISO 27001 management system requirements with leadership and performance management. In the early days participants analyse organisational context, define scope, secure management commitment and build the policy framework. They carry out risk assessment and treatment, select and justify controls from Annex A, and produce a Statement of Applicability. The middle days deal with operational themes: access, cryptography, supplier and cloud security, secure development, logging and monitoring, and the human element. Performance sessions cover security metrics, maturity models, assurance and internal audit, reporting to boards and audit committees, and continual improvement. Final days concentrate on incident and crisis leadership, continuity, team capability and certification readiness.
Learning is interactive and scenario-based. Participants work with sample ISMS documentation, run a risk workshop, conduct an audit exercise and rehearse a ransomware tabletop, finishing with a security leadership plan for their own organisation.
Training Objectives
By the end of the programme, participants will be able to:
- Explain the structure and requirements of ISO/IEC 27001 and how they support business goals.
- Define ISMS scope and context and secure leadership commitment.
- Conduct information security risk assessments and select treatments.
- Prepare a Statement of Applicability and justify Annex A control decisions.
- Establish security metrics, maturity assessments and board-level reporting.
- Manage supplier, cloud and third-party security risk.
- Lead incident response, crisis communication and business continuity.
- Prepare the organisation for internal audit, management review and certification audit.
What you'll learn
Key Takeaways
Participants take away:
- A draft ISMS scope, policy structure and implementation roadmap.
- A completed risk register and treatment plan for a sample environment.
- A Statement of Applicability outline with control justifications.
- A security metrics set and board reporting pack.
- An incident response leadership playbook with communication roles.
- A certification readiness checklist and internal audit plan.
- A personal leadership development plan for security management.
Training Methodology
Delivery blends management practice with technical depth for senior learners. It includes:
- Instructor-led sessions that map each ISO 27001 clause to leadership decisions
- Facilitated risk workshops using sample asset inventories
- A mock internal audit with evidence review
- Tabletop crisis simulations that test decisions under time pressure
- Executive communication practice with feedback on board-style presentations
Day 1: Security Leadership and the ISO 27001 Framework
- The security leader's role and organisational positioning
- Structure of ISO/IEC 27001 and the related 27002 guidance
- Threat landscape and business impact of incidents
- Aligning security strategy with corporate objectives
- Securing executive sponsorship and funding
- Discussion: security maturity in participants' organisations
Day 2: Context, Scope and Governance
- Internal and external context and interested parties
- Defining ISMS scope and boundaries
- Roles, responsibilities and security committees
- Information security policy and supporting standards
- Legal, regulatory and contractual requirements
- Exercise: drafting an ISMS scope statement
Day 3: Risk Assessment and Treatment
- Risk methodology, criteria and appetite
- Asset identification and valuation
- Threats, vulnerabilities and risk analysis
- Treatment options and residual risk acceptance
- Risk ownership and reporting
- Workshop: facilitating a risk assessment
Day 4: Controls and the Statement of Applicability
- Organisational, people, physical and technological controls
- Selecting controls and justifying exclusions
- Preparing the Statement of Applicability
- Access control, cryptography and network security
- Secure development and change management
- Exercise: building a Statement of Applicability
Day 5: Supplier, Cloud and Human Risk
- Third-party and supply chain security management
- Cloud security responsibilities and contracts
- Awareness, training and security culture
- Insider risk and remote work
- Data protection and privacy alignment
- Case study: a supplier-originated breach
Day 6: Security Operating Model and Team Performance
- Structuring security functions and service models
- Roles, skills and career paths for security staff
- Recruiting, retaining and motivating security talent
- Managing workload, burnout and on-call pressure
- Working with IT, legal, HR and the business
- Exercise: designing a security team structure
Day 7: Metrics, Maturity and Board Reporting
- Key risk indicators and performance indicators
- Control effectiveness measurement
- Maturity models and benchmarking
- Translating technical findings into business language
- Reporting to boards and audit committees
- Exercise: building a board security dashboard
Day 8: Monitoring, Detection and Incident Leadership
- Logging, monitoring and security operations centres
- Incident management lifecycle and escalation
- Roles in incident response and decision authority
- Evidence handling and legal notification duties
- Communicating with executives, regulators and the public
- Tabletop: ransomware attack on a financial institution
Day 9: Continuity, Resilience and Assurance
- Business impact analysis and continuity planning
- Backup, recovery and disaster recovery testing
- Internal audit of the ISMS
- Nonconformity, corrective action and continual improvement
- Management review inputs and outputs
- Exercise: conducting a mini internal audit
Day 10: Certification Readiness and Leadership Plan
- Stages of certification audit and common findings
- Documentation and evidence preparation
- Sustaining the ISMS after certification
- Ethical leadership and accountability in security
- Presentation of security leadership plans
- Peer feedback and course close
The programme is for professionals who direct or are preparing to direct security programmes, including:
- Chief information security officers and heads of security
- Information security and IT security managers
- IT directors and chief information officers
- Risk, compliance and governance managers
- Data protection officers and privacy leads
- Internal and IT auditors
- Security architects and senior engineers moving into management
- Business continuity and resilience managers
- Government, banking, telecom and utility technology leaders
Delegates who complete the ten days of sessions and the practical exercises receive a Certificate of Completion from Vision Reach Global Consultancy, accredited for CPD. This is a training certificate and is not an ISO 27001 certification body credential.
Choose Where You Want to Learn
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Leadership and Performance in Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain the structure and requirements of iso/iec 27001 and how they support business goals, define isms scope and context and secure leadership commitment, conduct information security risk assessments and select treatments, and prepare a statement of applicability and justify annex a control decisions. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is for professionals who direct or are preparing to direct security programmes, including: Chief information security officers and heads of security, Information security and IT security managers, IT directors and chief information officers, Risk, compliance and governance managers, Data protection officers and privacy leads, Internal and IT auditors, Security architects and senior engineers moving into management, Business continuity and resilience managers, and Government, banking, telecom and utility technology leaders.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Leadership and Performance in Cybersecurity & Information Security (ISO 27001) starts October 26, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.