Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course in Naivasha, Kenya
Classroom training in Naivasha · next cohort Nov 2, 2026 · from USD 3,000
Breaches, ransomware and regulatory penalties have moved information security from the server room to the boardroom, and the people who lead it are judged on outcomes rather than tools. Chief information security officers and their managers must align security with strategy, justify budgets, motivate teams and demonstrate control effectiveness. This ten-day programme develops that leadership capability on the foundation of ISO/IEC 27001.
The first five days cover security governance, context and stakeholder analysis, information security policy, risk assessment and treatment, the Statement of Applicability and the Annex A controls, supplier and cloud risk, and awareness. The second five days turn to performance: security operating models, key risk and performance indicators, maturity assessment, internal audit, management review, business continuity, incident response and crisis leadership, building and retaining teams, and preparing for certification audit. Exercises include a risk workshop, a board briefing and a tabletop incident. The programme is aimed at CISOs, information security managers, IT directors, risk and compliance leaders, data protection officers, internal auditors and senior engineers moving into management in banks, telecoms, government and enterprise. Classroom, online and in-house delivery lead to a CPD-accredited certificate. Afterwards you can direct an ISMS and speak credibly with executives.
At a Glance
Training in Naivasha, Kenya
Naivasha is a lakeside Rift Valley town about 90 km from Nairobi, popular for residential training.
More about training in Naivasha →- Format
- Classroom, in Naivasha
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 3,000 (KES 230,000)
- Next start dates
- Nov 2, 2026, Nov 30, 2026, Dec 28, 2026
- Certificate
- Certificate of Completion
- Nearest international airport
- Jomo Kenyatta International (NBO), about two hours by road
- From Nairobi
- About 90 km, roughly 1.5 to 2 hours by road
- Time zone
- East Africa Time (UTC+3)
- Currency
- Kenyan shilling (KES). Fees are listed in USD and KES.
About this course
Cyber incidents now disrupt operations, expose customer data and draw regulatory attention, and executives expect their security leaders to explain risk in business terms. Technical knowledge alone is not enough. Leaders must build a management system, prioritise limited resources, measure whether controls work and keep a team engaged under constant pressure.
The programme combines ISO 27001 management system requirements with leadership and performance management. In the early days participants analyse organisational context, define scope, secure management commitment and build the policy framework. They carry out risk assessment and treatment, select and justify controls from Annex A, and produce a Statement of Applicability. The middle days deal with operational themes: access, cryptography, supplier and cloud security, secure development, logging and monitoring, and the human element. Performance sessions cover security metrics, maturity models, assurance and internal audit, reporting to boards and audit committees, and continual improvement. Final days concentrate on incident and crisis leadership, continuity, team capability and certification readiness.
Learning is interactive and scenario-based. Participants work with sample ISMS documentation, run a risk workshop, conduct an audit exercise and rehearse a ransomware tabletop, finishing with a security leadership plan for their own organisation.
Training Objectives
By the end of the programme, participants will be able to:
- Explain the structure and requirements of ISO/IEC 27001 and how they support business goals.
- Define ISMS scope and context and secure leadership commitment.
- Conduct information security risk assessments and select treatments.
- Prepare a Statement of Applicability and justify Annex A control decisions.
- Establish security metrics, maturity assessments and board-level reporting.
- Manage supplier, cloud and third-party security risk.
- Lead incident response, crisis communication and business continuity.
- Prepare the organisation for internal audit, management review and certification audit.
What you'll learn
Key Takeaways
Participants take away:
- A draft ISMS scope, policy structure and implementation roadmap.
- A completed risk register and treatment plan for a sample environment.
- A Statement of Applicability outline with control justifications.
- A security metrics set and board reporting pack.
- An incident response leadership playbook with communication roles.
- A certification readiness checklist and internal audit plan.
- A personal leadership development plan for security management.
Training Methodology
Delivery blends management practice with technical depth for senior learners. It includes:
- Instructor-led sessions that map each ISO 27001 clause to leadership decisions
- Facilitated risk workshops using sample asset inventories
- A mock internal audit with evidence review
- Tabletop crisis simulations that test decisions under time pressure
- Executive communication practice with feedback on board-style presentations
Day 1: Security Leadership and the ISO 27001 Framework
- The security leader's role and organisational positioning
- Structure of ISO/IEC 27001 and the related 27002 guidance
- Threat landscape and business impact of incidents
- Aligning security strategy with corporate objectives
- Securing executive sponsorship and funding
- Discussion: security maturity in participants' organisations
Day 2: Context, Scope and Governance
- Internal and external context and interested parties
- Defining ISMS scope and boundaries
- Roles, responsibilities and security committees
- Information security policy and supporting standards
- Legal, regulatory and contractual requirements
- Exercise: drafting an ISMS scope statement
Day 3: Risk Assessment and Treatment
- Risk methodology, criteria and appetite
- Asset identification and valuation
- Threats, vulnerabilities and risk analysis
- Treatment options and residual risk acceptance
- Risk ownership and reporting
- Workshop: facilitating a risk assessment
Day 4: Controls and the Statement of Applicability
- Organisational, people, physical and technological controls
- Selecting controls and justifying exclusions
- Preparing the Statement of Applicability
- Access control, cryptography and network security
- Secure development and change management
- Exercise: building a Statement of Applicability
Day 5: Supplier, Cloud and Human Risk
- Third-party and supply chain security management
- Cloud security responsibilities and contracts
- Awareness, training and security culture
- Insider risk and remote work
- Data protection and privacy alignment
- Case study: a supplier-originated breach
Day 6: Security Operating Model and Team Performance
- Structuring security functions and service models
- Roles, skills and career paths for security staff
- Recruiting, retaining and motivating security talent
- Managing workload, burnout and on-call pressure
- Working with IT, legal, HR and the business
- Exercise: designing a security team structure
Day 7: Metrics, Maturity and Board Reporting
- Key risk indicators and performance indicators
- Control effectiveness measurement
- Maturity models and benchmarking
- Translating technical findings into business language
- Reporting to boards and audit committees
- Exercise: building a board security dashboard
Day 8: Monitoring, Detection and Incident Leadership
- Logging, monitoring and security operations centres
- Incident management lifecycle and escalation
- Roles in incident response and decision authority
- Evidence handling and legal notification duties
- Communicating with executives, regulators and the public
- Tabletop: ransomware attack on a financial institution
Day 9: Continuity, Resilience and Assurance
- Business impact analysis and continuity planning
- Backup, recovery and disaster recovery testing
- Internal audit of the ISMS
- Nonconformity, corrective action and continual improvement
- Management review inputs and outputs
- Exercise: conducting a mini internal audit
Day 10: Certification Readiness and Leadership Plan
- Stages of certification audit and common findings
- Documentation and evidence preparation
- Sustaining the ISMS after certification
- Ethical leadership and accountability in security
- Presentation of security leadership plans
- Peer feedback and course close
The programme is for professionals who direct or are preparing to direct security programmes, including:
- Chief information security officers and heads of security
- Information security and IT security managers
- IT directors and chief information officers
- Risk, compliance and governance managers
- Data protection officers and privacy leads
- Internal and IT auditors
- Security architects and senior engineers moving into management
- Business continuity and resilience managers
- Government, banking, telecom and utility technology leaders
Delegates who complete the ten days of sessions and the practical exercises receive a Certificate of Completion from Vision Reach Global Consultancy, accredited for CPD. This is a training certificate and is not an ISO 27001 certification body credential.
Choose Where You Want to Learn
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course Venues
KenyaNaivashaNext Nov 2· 13 dates$3,000Viewing- KenyaNairobiNext Nov 9· 13 dates$3,000
- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
South AfricaPretoriaNext Nov 2· 13 dates$6,400- South AfricaJohannesburgNext Nov 2· 13 dates$6,800
- South AfricaCape TownNext Oct 26· 13 dates$7,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course in Naivasha
Everything you need to know about this course before you register.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Naivasha, Kenya, in Monday-to-Friday cohorts that start every four weeks. The venue, daily timings and joining details are sent in your Joining Instructions email ahead of the start date.
The next Naivasha cohort starts on November 2, 2026, and a new intake follows every four weeks. Pick a date under "Upcoming sessions in Naivasha" above and click Register; your seat is confirmed once payment or a signed purchase order is received.
The classroom fee for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course in Naivasha is USD 3,000 per delegate, covering tuition and course materials. Register 3 or more delegates together and a 5% team discount is applied automatically.
Yes. Besides Naivasha, Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Nairobi, Mombasa, Kisumu, and Machakos. It also runs as live online training you can join from anywhere in Kenya, and in-house at your organisation's own premises.
Yes — Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course can be delivered at your offices in Naivasha or at a venue you choose, on dates that suit your team, with case studies tailored to your sector. Message our training advisors to request a proposal.
By the end of the Leadership and Performance in Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain the structure and requirements of iso/iec 27001 and how they support business goals, define isms scope and context and secure leadership commitment, conduct information security risk assessments and select treatments, and prepare a statement of applicability and justify annex a control decisions. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is for professionals who direct or are preparing to direct security programmes, including: Chief information security officers and heads of security, Information security and IT security managers, IT directors and chief information officers, Risk, compliance and governance managers, Data protection officers and privacy leads, Internal and IT auditors, Security architects and senior engineers moving into management, Business continuity and resilience managers, and Government, banking, telecom and utility technology leaders.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course is pitched at advanced professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Related Training
More Computing and Information Technology Courses in Kenya
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Training in Naivasha
Other Courses Running in Naivasha, Kenya
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Leadership and Performance in Cybersecurity & Information Security (ISO 27001) Training Course in Kenya or browse every course running in Naivasha.