Live Online Professional Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Nov 2, 2026 · from USD 1,700
Ransomware, phishing and insider misuse now threaten banks, hospitals, government systems and small businesses alike, and customers and regulators expect proof that information is protected. Ten days give security practitioners both the management system and the technical depth. The first week covers cyber threats, the CIA triad, governance, ISO/IEC 27001 clauses, scoping, asset registers, risk assessment and treatment, the Statement of Applicability and the Annex A controls, with NIST CSF and ISO 27005 as companions.
The second week moves into technical and operational practice: network and endpoint hardening, identity and access management, encryption, vulnerability scanning and penetration testing basics, secure configuration, cloud security, logging with SIEM, incident response, digital forensics fundamentals, business continuity, supplier risk and internal auditing against the standard. Labs use Kali Linux, Wireshark, Nmap and open-source monitoring tools. The programme is written for IT managers, security officers, system and network administrators, auditors, risk and compliance staff and data protection officers in banks, telecoms, government and enterprises. Delivery is classroom, online or in-house with a CPD-accredited certificate. Afterwards you can lead an ISO 27001 implementation and run a first internal audit.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Nov 2, 2026, Nov 30, 2026, Dec 28, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Information is among the most valuable and most exposed assets that any organisation holds. Attackers target payment systems, personal records and operational technology, while staff mistakes and weak supplier controls cause as many breaches as hostile actors. Boards want assurance, customers ask about certification, and data protection obligations make poor security an expensive legal risk as well as an operational one.
This ten-day programme provides a complete route through information security. It starts with threats, governance and risk, and takes participants through the structure of ISO/IEC 27001, the building of an information security management system and the selection of controls. It then drops into the technical layers: networks, hosts, applications, identities, data and cloud services. Participants learn how to detect, contain and learn from incidents, test their own defences and maintain continuity when systems fail.
Throughout, management documents and technical labs run in parallel so that policy is connected to practice. Participants draft a scope statement, risk register and Statement of Applicability, then test controls in a lab network. The final days integrate everything into a simulated certification readiness review, an internal audit and a plan of improvements for their own environment.
Training Objectives
By the end of the course, participants will be able to:
- Explain the clauses and Annex A controls of ISO/IEC 27001 and how certification works.
- Define the scope of an information security management system and build an asset register.
- Carry out a risk assessment and select treatments, producing a Statement of Applicability.
- Harden networks, servers, endpoints and user accounts against common attack techniques.
- Configure logging and monitoring to detect suspicious activity.
- Plan and run an incident response, including evidence handling and post-incident review.
- Evaluate cloud services and suppliers for security and compliance risk.
- Conduct an internal audit against the standard and report nonconformities.
What you'll learn
Key Takeaways
Participants leave the course with:
- A draft ISMS scope statement, policy set and asset register.
- A completed risk register with treatment plan and Statement of Applicability.
- A hardening checklist for servers, network devices and user endpoints.
- An incident response plan with roles, playbooks and communication templates.
- A business continuity and recovery outline linked to risk findings.
- An internal audit programme and checklist aligned to ISO 27001.
- A practical roadmap toward certification readiness.
Training Methodology
Ten days allow management practice and technical labs to reinforce each other. The delivery combines:
- Instructor-led explanation of each ISO 27001 clause with worked document examples
- Virtual lab environments for scanning, hardening and log analysis
- A continuing case organisation whose ISMS participants build in stages
- Tabletop incident simulations with assigned response roles
- Mock internal audit interviews and nonconformity writing
Day 1: Threat Landscape and Security Fundamentals
- Cyber threats: phishing, ransomware, insider misuse and supply chain attacks
- Confidentiality, integrity and availability
- Security governance, roles and accountability
- Frameworks overview: ISO 27001, NIST CSF and CIS Controls
- Legal and regulatory drivers for information security
- Exercise: analysing a public breach case
Day 2: Introduction to ISO/IEC 27001
- Structure of the standard: clauses 4 to 10 and Annex A
- Context of the organisation and interested parties
- Leadership commitment and the information security policy
- Certification process and the audit cycle
- Common reasons implementations fail
- Exercise: drafting a scope statement
Day 3: Assets and Risk Assessment
- Identifying and classifying information assets
- Threat, vulnerability and impact analysis
- Risk methodologies with ISO 27005 as a reference
- Likelihood and impact scoring and risk acceptance criteria
- Building a risk register
- Lab: assessing risks for a sample finance department
Day 4: Risk Treatment and Controls
- Treatment options: reduce, transfer, avoid and accept
- Selecting Annex A controls and writing the Statement of Applicability
- Organisational, people, physical and technological control themes
- Policies and procedures that staff can follow
- Security awareness and training programmes
- Exercise: building a treatment plan
Day 5: Documentation, Operation and Metrics
- Document control and records required by the standard
- Operating the ISMS day to day
- Security metrics and management review inputs
- Change management and secure development lifecycle basics
- Corrective action and continual improvement
- Review of week one deliverables
Day 6: Network and Endpoint Security
- Network segmentation, firewalls and VPNs
- Wi-Fi security and secure remote access
- Server and workstation hardening on Windows and Linux
- Patch and configuration management
- Endpoint protection and mobile device management
- Lab: scanning and hardening a test network with Nmap
Day 7: Identity, Cryptography and Application Security
- Identity and access management, least privilege and multi-factor authentication
- Privileged account control and password management
- Encryption, hashing, certificates and key management
- Web application risks and the OWASP Top 10
- Email security and anti-phishing controls
- Lab: analysing network traffic with Wireshark
Day 8: Monitoring, Vulnerability Management and Testing
- Logging strategy and SIEM concepts
- Vulnerability scanning and prioritising remediation
- Penetration testing scope, rules of engagement and reporting
- Threat intelligence and detection use cases
- Data loss prevention and backup security
- Lab: reviewing logs to trace an intrusion
Day 9: Cloud, Suppliers, Incident Response and Continuity
- Shared responsibility and cloud security configuration
- Supplier and outsourcing risk assessment
- Incident response lifecycle, roles and playbooks
- Digital forensics fundamentals and evidence preservation
- Business continuity, disaster recovery and testing
- Tabletop exercise: ransomware incident at a bank
Day 10: Internal Audit and Certification Readiness
- Planning and conducting an ISMS internal audit
- Audit evidence, interviews and sampling
- Writing nonconformity reports and tracking corrective actions
- Stage 1 and stage 2 certification audit preparation
- Management review and readiness assessment
- Final project presentations and action planning
The course is intended for professionals responsible for protecting information and systems, including:
- Chief information security officers and IT security managers
- Systems, network and cloud administrators
- Information security and risk analysts
- IT auditors and internal auditors
- Compliance managers and data protection officers
- Software and DevOps engineers with security duties
- IT managers in banks, telecoms, health and government institutions
- Consultants preparing clients for ISO 27001 certification
Participants who attend all ten days and complete the labs, case documents and final project are awarded a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy. This is a training certificate and does not replace an examination-based lead implementer or auditor qualification.
Choose Where You Want to Learn
Professional Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Professional Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Professional Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain the clauses and annex a controls of iso/iec 27001 and how certification works, define the scope of an information security management system and build an asset register, carry out a risk assessment and select treatments, producing a statement of applicability, and harden networks, servers, endpoints and user accounts against common attack techniques. The full breakdown of topics is covered session by session in the Course Outline tab above.
The course is intended for professionals responsible for protecting information and systems, including: Chief information security officers and IT security managers, Systems, network and cloud administrators, Information security and risk analysts, IT auditors and internal auditors, Compliance managers and data protection officers, Software and DevOps engineers with security duties, IT managers in banks, telecoms, health and government institutions, and Consultants preparing clients for ISO 27001 certification.
Professional Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Professional Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Professional Cybersecurity & Information Security (ISO 27001) starts November 2, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Professional Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Professional Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Professional Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Professional Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Professional Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.