Live Online Practical Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Oct 19, 2026 · from USD 1,700
Ransomware, phishing, stolen credentials and misconfigured cloud services hit organisations of every size, and clients, regulators and donors increasingly ask for proof of control. A security programme must combine technical defences that actually work with a management system that keeps them working. Over ten days, IT and security staff gain both, with the emphasis on doing rather than reading slides.
The first week covers threats and attack methods, network and endpoint hardening, firewalls, identity and access management, multi-factor authentication, encryption, patching, logging and vulnerability scanning with tools such as Nmap and Wireshark in a lab environment. The second week turns to ISO/IEC 27001: scoping, context and leadership, risk assessment and treatment, the Statement of Applicability, Annex A controls, policies, supplier and cloud security, business continuity, incident response, internal audit and preparation for certification. A final exercise brings technical and management work together in a simulated attack and response. The programme is for system and network administrators, security officers, IT managers, auditors, risk and compliance staff and developers in banks, telecoms, government and NGOs. It runs in classroom, online and in-house formats. You leave with a risk register, draft policies, a hardened lab environment, an incident playbook and a CPD-accredited certificate.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Oct 19, 2026, Nov 16, 2026, Dec 14, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Every organisation now depends on information systems, and every one is a target. Attacks no longer need sophistication to succeed; weak passwords, unpatched servers, over-privileged accounts and untrained staff provide plenty of openings. Security that is limited to a few tools tends to decay, which is why standards-based management matters alongside technical skill.
This ten-day course is split deliberately between practice and management. The opening days establish the threat landscape and the fundamentals of securing networks, operating systems, applications and cloud services, with laboratory exercises in scanning, hardening, access control, encryption and log analysis. Participants learn how to detect problems, prioritise vulnerabilities and contain an incident. The second part introduces ISO/IEC 27001 and shows how to build an information security management system around real risks: defining scope, assessing and treating risk, selecting controls, writing policies and procedures, training staff and measuring performance.
The last days address supplier and cloud risk, business continuity, internal audit and certification readiness. Delegates finish with a documented set of risk and control artefacts for their own organisation, and a team simulation that tests detection, response and reporting under time pressure.
Training Objectives
By the end of the course, participants will be able to:
- Describe common attack techniques and how defenders detect and block them.
- Harden servers, workstations, network devices and cloud accounts.
- Configure access control, multi-factor authentication and encryption.
- Scan for vulnerabilities and analyse logs to spot suspicious behaviour.
- Scope an ISMS and carry out an ISO 27001 risk assessment and treatment plan.
- Produce a Statement of Applicability and the core policies required by the standard.
- Plan and run incident response and business continuity exercises.
- Conduct internal audits and prepare for external certification.
What you'll learn
Key Takeaways
Participants leave the course with:
- A hardening checklist for servers, endpoints and network devices.
- A completed sample risk register and treatment plan.
- A draft Statement of Applicability and scope statement.
- Core information security policy templates.
- An incident response playbook tested in simulation.
- An internal audit programme and certification readiness checklist.
Training Methodology
This is a laboratory-based programme in which concepts are always followed by practice:
- Instructor demonstrations in isolated virtual machines
- Hands-on labs in scanning, hardening, access control and log analysis
- ISMS workshops to draft scope, risk registers and policies
- A tabletop and technical incident simulation in teams
- Individual review of documents against the ISO 27001 requirements
Day 1: Threat Landscape and Security Fundamentals
- Confidentiality, integrity and availability
- Attack lifecycle: phishing, malware, ransomware and insider threats
- Threat actors and common vulnerabilities
- Security architecture and defence in depth
- Setting up the lab environment
Day 2: Network Security
- TCP/IP essentials for defenders
- Firewalls, segmentation and VPNs
- Wireless security
- Traffic capture and analysis with Wireshark
- Port and service scanning with Nmap
- Lab: mapping and securing a small network
Day 3: Endpoint and Server Hardening
- Secure configuration baselines for Windows and Linux
- Patch and vulnerability management
- Malware protection and application control
- Privilege management and removing local admin rights
- Backups and ransomware resilience
Day 4: Identity, Access and Cryptography
- Authentication, single sign-on and multi-factor authentication
- Role-based access and least privilege
- Password policy and credential protection
- Encryption at rest and in transit, certificates and key management
- Lab: configuring access control and encryption
Day 5: Application, Cloud and Mobile Security
- OWASP Top 10 web application risks
- Secure development practices
- Cloud shared responsibility and misconfiguration
- Mobile device management and remote working
- Email and web filtering
Day 6: Monitoring, Detection and Incident Response
- Logging strategy and security information and event management
- Indicators of compromise
- Incident handling lifecycle: prepare, detect, contain, recover
- Digital evidence handling basics
- Writing an incident response playbook
Day 7: ISO 27001 and the ISMS
- Structure of ISO/IEC 27001 clauses and Annex A
- Context, interested parties and scope
- Leadership commitment, roles and objectives
- Information security policy hierarchy
- Asset inventory and classification
Day 8: Risk Assessment and Treatment
- Risk assessment methodologies and criteria
- Identifying threats, vulnerabilities and impacts
- Risk treatment options and risk acceptance
- Control selection and the Statement of Applicability
- Workshop: producing a risk register
Day 9: Operating the ISMS
- Awareness, training and competence
- Supplier and outsourced service security
- Business continuity and disaster recovery planning
- Privacy and data protection alignment
- Metrics, monitoring and management review
- Internal audit and nonconformity handling
Day 10: Certification Readiness and Simulation
- Stages of an external certification audit
- Documented information required by the standard
- Continual improvement and corrective action
- Team simulation: detecting and responding to an attack
- Reporting to management and regulators
- Personal action plan and course review
The course is meant for people who secure, manage or assure information systems, including:
- System, network and database administrators
- Information security officers and analysts
- IT managers and heads of ICT
- Internal and IT auditors
- Risk, compliance and data protection officers
- Software developers and DevOps engineers
- Security staff in banks, telecoms, government and NGOs
- Consultants preparing clients for ISO 27001 certification
Participants who attend the ten days and complete the labs and workshops receive a CPD-accredited Certificate of Completion from Vision Reach Global Consultancy. It confirms training completed and is not an ISO 27001 auditor qualification.
Choose Where You Want to Learn
Practical Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Practical Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Practical Cybersecurity & Information Security (ISO 27001) programme, you'll be able to describe common attack techniques and how defenders detect and block them, harden servers, workstations, network devices and cloud accounts, configure access control, multi-factor authentication and encryption, and scan for vulnerabilities and analyse logs to spot suspicious behaviour. The full breakdown of topics is covered session by session in the Course Outline tab above.
The course is meant for people who secure, manage or assure information systems, including: System, network and database administrators, Information security officers and analysts, IT managers and heads of ICT, Internal and IT auditors, Risk, compliance and data protection officers, Software developers and DevOps engineers, Security staff in banks, telecoms, government and NGOs, and Consultants preparing clients for ISO 27001 certification.
Practical Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Practical Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Practical Cybersecurity & Information Security (ISO 27001) starts November 16, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Practical Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Practical Cybersecurity & Information Security (ISO 27001) Training Course is pitched at intermediate professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Practical Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Practical Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Practical Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.