Practitioner · roles
ISMS Essentials for Managers and Control Owners
A practical walk through the management-system clauses 4 to 10 of ISO/IEC 27001:2022, following a fictional Pune logistics firm as it sets scope, assesses risk, runs controls, audits itself and improves. Plain language, no template overload, and a clear view of what auditors usually ask to see. Completing this course does not certify or make your organisation compliant; certification is only through an accredited certification body’s audit.
6 modules~120 minutesFinal exam: 20 questions · 40 min · pass 75%Valid 24 months
Who it’s for
Managers, department heads, risk owners, control owners and ISMS leads in Indian businesses of 20 to 200 people who are building or running an ISO/IEC 27001:2022 information security management system.
After this course, people can
- Define the context, interested parties and a defensible scope for your ISMS.
- Explain the roles of top management, the ISMS lead, risk owners and control owners, and set measurable security objectives.
- Run a simple, repeatable risk assessment and produce a risk treatment plan and an honest Statement of Applicability.
- Operate security processes, changes and supplier controls so that they leave reliable evidence.
- Use metrics, internal audit, management review and corrective action to improve the ISMS over time.
Modules
- Context, interested parties and scope12 min
- Leadership, policy, roles and objectives12 min
- Risk assessment, treatment and the Statement of Applicability15 min
- Support: resources, competence, awareness, communication and documented information13 min
- Operating the ISMS: planning and control, change and suppliers12 min
- Measuring and improving: monitoring, internal audit, management review and corrective action15 min
- Final exam · 20 questions · pass 75%After all modules