Live Online Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course
Live online, instructor-led · next cohort Oct 19, 2026 · from USD 1,700
Ransomware, supply chain compromise and cloud misconfiguration have moved information security from an IT concern to a board agenda item. Defenders who simply add tools to a growing pile still lose ground. This 10-day programme teaches leaders to set direction first: understand the threat landscape, define risk appetite, align security to business objectives and then build a management system that can be audited. You study ISO/IEC 27001 clauses and Annex A controls, scoping, the statement of applicability, risk assessment and treatment, policies, metrics and internal audit, alongside NIST Cybersecurity Framework functions.
The second week concentrates on innovation and depth. Sessions address zero trust architecture, identity and access governance, cloud security posture, DevSecOps, security automation, threat intelligence, detection engineering, incident response, resilience testing and the security implications of AI. Labs and tabletop exercises put the ideas under pressure. The programme is meant for chief information security officers, security managers, IT directors, risk and compliance leaders, auditors and architects in banks, telecoms, government and enterprises. Afterwards you can lead an ISO 27001 implementation, brief a board on cyber risk and prioritise investment. Classroom, online and in-house delivery are available, with a CPD-accredited certificate.
At a Glance
How Live Online Training Works
Live online training, led by a trainer in real time, for participants anywhere.
More about live online training →- Format
- Live online, instructor-led
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 1,700 (KES 160,000)
- Next start dates
- Oct 19, 2026, Nov 16, 2026, Dec 14, 2026
- Certificate
- Certificate of Completion
- What you need
- A computer with a reliable internet connection, a webcam and a headset
About this course
Digital services now underpin payments, health records, public services and supply chains, which makes security failures immediately visible to customers and regulators. Attackers are organised and quick to exploit new technology, while security budgets remain limited. Leaders need a strategy that targets the risks that matter most and a management system that shows, credibly, that controls work.
The programme begins with threat landscape analysis and the development of a security strategy tied to business priorities, governance structures and metrics. It then covers the full ISO/IEC 27001 lifecycle: context and scope, leadership commitment, risk assessment methodology, treatment plans, the statement of applicability, control selection, documentation, awareness, monitoring, internal audit, management review and continual improvement. The second half explores modern practice and innovation, including zero trust, identity governance, cloud and container security, secure development, security operations and automation, third-party risk, privacy alignment and incident and crisis management.
Learning is practical. Participants build a risk register, draft a statement of applicability, run tabletop exercises and develop a three-year security strategy for a case organisation. They return with templates and an action plan aligned to their own environment.
Training Objectives
After the programme, participants will be able to:
- Develop a cybersecurity strategy aligned to business objectives and risk appetite.
- Scope and plan an ISO/IEC 27001 information security management system.
- Perform information security risk assessment and select appropriate treatments.
- Draft policies, a statement of applicability and supporting evidence for certification audits.
- Apply zero trust, identity governance and cloud security principles to architecture decisions.
- Evaluate emerging technologies, including AI, for security benefit and risk.
- Plan incident response, resilience testing and crisis communication.
- Define security metrics and report risk clearly to executives and boards.
What you'll learn
Key Takeaways
Participants take away:
- A three-year cybersecurity strategy outline with objectives and measures.
- A completed sample risk assessment and treatment plan.
- A draft statement of applicability showing control choices and justification.
- An ISO 27001 implementation plan with milestones, roles and evidence needs.
- An incident response playbook skeleton tested in a tabletop exercise.
- A board reporting pack template for cyber risk and control performance.
Training Methodology
The programme combines standards knowledge with realistic leadership scenarios through:
- Presentations by facilitators with security management and audit experience
- Hands-on labs on risk registers, control mapping and cloud configuration review
- Tabletop exercises with injected incident events and decision points
- Group design studios for strategy and zero trust roadmaps
- Mock executive and audit interviews with feedback
Day 1: Threat Landscape and Security Strategy
- Current attack patterns: ransomware, phishing, supply chain and insider threats
- Linking security to business objectives and risk appetite
- Strategy components: vision, principles, capabilities and roadmap
- Security governance and organisational structures
- Introduction to NIST Cybersecurity Framework functions
- Exercise: setting strategic priorities for a case organisation
Day 2: ISO 27001 Foundations and Scoping
- Structure of ISO/IEC 27001 and the management system approach
- Context of the organisation and interested parties
- Leadership commitment, roles and information security policy
- Defining ISMS scope and boundaries
- Related standards in the 27000 family
- Workshop: drafting a scope statement
Day 3: Information Security Risk Assessment
- Asset identification and valuation
- Threats, vulnerabilities and existing controls
- Qualitative and quantitative risk methods
- Risk acceptance criteria and risk ownership
- Building and maintaining a risk register
- Exercise: assessing risks for three critical assets
Day 4: Risk Treatment and Annex A Controls
- Treatment options: modify, avoid, share and retain
- Organisational, people, physical and technological control themes
- Writing the statement of applicability
- Risk treatment plan and residual risk approval
- Policies, procedures and documented information
- Lab: mapping risks to controls and justifying inclusion
Day 5: Operation, Awareness and Performance Evaluation
- Operational planning and change control
- Awareness, competence and security culture
- Monitoring, measurement and security metrics
- Internal audit programme and audit evidence
- Management review inputs and outputs
- Nonconformities, corrective action and continual improvement
Day 6: Zero Trust, Identity and Access
- Zero trust principles and reference architecture
- Identity governance, privileged access and multi-factor authentication
- Network segmentation and secure remote access
- Endpoint and device trust
- Migration paths from perimeter security
- Design studio: a zero trust roadmap for a hybrid enterprise
Day 7: Cloud, Applications and DevSecOps
- Shared responsibility model and cloud security posture management
- Container and infrastructure-as-code security
- Secure software development lifecycle and code scanning
- API security and secrets management
- Third-party and supply chain risk assessment
- Lab: reviewing a cloud configuration for security gaps
Day 8: Detection, Threat Intelligence and Automation
- Security operations centre design and logging strategy
- Threat intelligence sources and use in detection
- Detection engineering with MITRE ATT&CK mapping
- Security orchestration and automated response
- Vulnerability management and prioritisation
- Lab: building detection use cases from attack techniques
Day 9: Incident Response, Resilience and Emerging Technology
- Incident response lifecycle and playbooks
- Digital forensics basics and evidence preservation
- Business continuity, disaster recovery and cyber resilience testing
- Risks and benefits of artificial intelligence in security
- Quantum-safe cryptography and other emerging issues
- Tabletop exercise: responding to a ransomware incident
Day 10: Certification Readiness, Board Reporting and Integrated Project
- Stage 1 and stage 2 certification audit expectations
- Preparing evidence and managing auditors
- Cyber risk quantification and board reporting
- Security budget justification and investment prioritisation
- Presenting the three-year strategy for the case organisation
- Personal action plan and course review
The programme is designed for those who lead, govern or audit information security, including:
- Chief information security officers and heads of security
- Information security and IT security managers
- IT directors and heads of infrastructure
- Risk, compliance and data protection officers
- Internal and external IT auditors
- Security, cloud and enterprise architects
- Security operations centre managers
- Government ICT and cyber agency officers
- Consultants preparing organisations for ISO 27001 certification
Participants who complete all 10 days, the labs and the final strategy presentation are awarded a CPD-accredited Certificate of Completion by Vision Reach Global Consultancy. It recognises training only and is not an ISO 27001 auditor qualification.
Choose Where You Want to Learn
Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Live Online Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course
Everything you need to know about this course before you register.
By the end of the Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) programme, you'll be able to develop a cybersecurity strategy aligned to business objectives and risk appetite, scope and plan an iso/iec 27001 information security management system, perform information security risk assessment and select appropriate treatments, and draft policies, a statement of applicability and supporting evidence for certification audits. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is designed for those who lead, govern or audit information security, including: Chief information security officers and heads of security, Information security and IT security managers, IT directors and heads of infrastructure, Risk, compliance and data protection officers, Internal and external IT auditors, Security, cloud and enterprise architects, Security operations centre managers, Government ICT and cyber agency officers, and Consultants preparing organisations for ISO 27001 certification.
Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) starts November 16, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
More Computing and Information Technology Courses
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Live Online
Other Live Online Courses
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Strategy and Innovation in Cybersecurity & Information Security (ISO 27001) Training Course or browse every live online course.