At the end of the training, the participant will be able to:
Implementing and effectively managing an ISMS
Assessing risks and writing a statement of applicability
Proposing action plans
Understand the correlation between the ISO/IEC 27001 and 27002 standards as well as with other regulatory frameworks
Interpreting the requirements of the ISO/IEC 27001 standard in a specific organization’s context
Intended audience
Risk managers, CISOs, IT managers, any IS player who needs to incorporate security constraints.
Prerequisites
Basic knowledge of computer security.
Certification
The final exam certifies that you have the knowledge and skills needed to implement an ISMS in accordance with the ISO/IEC 27001:2013 standard. The exam is held on the last half-day. It is provided in partnership with the certifying body, PECB.
Contents of the exam, rules to follow. Standards or other documents provided to the candidates.
Conditions in place to preserve the confidentiality of the copies.
Minimum score needed to pass the written exam.
2
Review. Tips for the exam.
A participation certificate worth 31 CPD (Continuing Professional Development) credits is issued.
Exam
Mock exam and group correction. Taking the exam.
ISO/IEC 27001 standard and initializing an ISMS
Standards and regulatory frameworks.
3
Planning the implementation of an ISMS
Scope of the ISMS.
Information security policies.
Risk assessment.
Statement of applicability and managerial decision to implement the ISMS.
4
Implementing an ISMS
Defining a documentation management process.
5
Implementing security measures.
Incident management.
Managing operational activities.
Monitoring, measurement, and continuous improvement
6
Preparing for the ISMS certification audit.
Internal, external, and third-party auditing. Choosing your auditor.
Management review.
Preparing for the certification audit.
Skill and assessment of the “implementers”.
Organizational auditing: Approach, methods.
Exam
Customer reviews
4,8 / 5
Customer reviews are based on end-of-course evaluations. The score is calculated from all evaluations within the past year. Only reviews with a textual comment are displayed.
JEAN-MICHEL T.
03/08/26
5 / 5
The trainer is excellent and a very good teacher. The fact that he has practical experience really helps us understand things better. He shares real-life examples, which makes it easier. To be honest, I really appreciated the quality of the course.
VALENTIN S.
03/08/26
4 / 5
Very good
MOHAMED D.
03/08/26
5 / 5
Everything was well under control
GARY C.
03/08/26
4 / 5
Excellent content, and a very friendly and engaging trainer.
THEO B.
01/06/26
5 / 5
Nadir is a very good teacher
GUILLAUME B.
01/06/26
4 / 5
N/A
EMMANUEL K.
01/06/26
5 / 5
The course was brilliant. The instructor was attentive and a great teacher.
CYRIL S.
01/06/26
5 / 5
The trainer is a very good teacher and highly competent
ANTOINE P.
01/06/26
5 / 5
The training was delivered with great rigour and attention to participants’ queries. Strengths: dynamic > precise > attentive Areas for improvement: revising the training materials to give PECB trainers greater flexibility regarding interaction between the classroom and the trainer
BIROM B.
01/06/26
5 / 5
Thank you very much!
AMAIRI R.
01/06/26
5 / 5
The content is clear and precise. The examples given and the use cases were very helpful and made it easier for me to understand the various sections of the standard.
ALLAN O.
01/06/26
5 / 5
Full content
XAVIER R.
23/03/26
3 / 5
The slides are far too wordy. It’s impossible to follow the explanations at the same time.
ARNAUD C.
23/03/26
5 / 5
A trainer who is always available, a skilled teacher and a true professional. It’s a difficult exercise to bring a subject like this to life, but it was a success.
ALEXIS H.
02/02/26
5 / 5
The trainer was very understanding and explained the course well.
CÉLESTE N.
02/02/26
5 / 5
The trainer is dynamic and easy to illustrate, which makes the theoretical course easier to digest.
ANTHONY L.
08/12/25
5 / 5
I was initially apprehensive about the content, which was very theoretical given my technical background. In the end, the trainer was able to make the concepts accessible and concrete thanks to a dynamic teaching style, illustrated by numerous examples and feedback from experience. The balance between theory, practical application and exchanges helped to maintain a good level of attention and facilitate the appropriation of the concepts. The training was clear, lively and directly applicable to
RÉMI V.
08/12/25
5 / 5
Friendly, informative speaker. Good advice on certification.
PASCAL R.
08/12/25
5 / 5
Very good training. Very good trainer.
ERIC M.
08/12/25
5 / 5
Very good animation
STÉPHANE H.
01/12/25
5 / 5
Good methodology, with the trainer allocating time to present concrete cases.
OLIVIER C.
01/12/25
5 / 5
Thank you very much for the examples that helped to make some of the concepts in the course more concrete. AND a very big thank you for the open-mindedness and the TIPS.
OUADIE J.
01/12/25
4 / 5
It would have been nice to have at least a hard copy of the index.
AMINE L.
01/12/25
5 / 5
The trainer is very educational and gives lots of concrete examples, which makes it easier to understand some of the very high-level requirements of the standard. The training material is fairly comprehensive, but it would have been more effective to have just one course material rather than 4 to make it easier to find what you're looking for on the day of the exam.
LUDOVIC J.
17/11/25
5 / 5
The trainer's teaching methods were excellent: he made the concepts accessible, illustrated them with concrete examples and created a very pleasant atmosphere for discussion. We really benefited from his experience. I came away with a better understanding of the standard and concrete ways of applying it.
WILLIAM D.
20/10/25
5 / 5
A top-class presenter
PHILIPPE S.
13/10/25
5 / 5
Very relevant trainer - expert (and passionate) in the field.
ZINEB B.
13/10/25
5 / 5
Very good teaching methods.
SYLVIE M.
13/10/25
5 / 5
It would be useful to leave any comments on the pdfs, even secure ones, for note-taking purposes.
GABRIEL D.
29/09/25
5 / 5
Very good level
EVE M.
29/09/25
5 / 5
The content is satisfactory, but only a lot of content for 5 days, which makes for a long day.
PARTICIPANTS
Risk managers, CISOs, IT managers, any IS player who needs to incorporate security constraints.
PREREQUISITES
Basic knowledge of computer security.
TRAINER QUALIFICATIONS
The experts leading the training are specialists in the covered subjects. They have been approved by our instructional teams for both their professional knowledge and their teaching ability, for each course they teach. They have at least five to ten years of experience in their field and hold (or have held) decision-making positions in companies.
ASSESSMENT TERMS
The trainer evaluates each participant’s academic progress throughout the training using multiple choice, scenarios, hands-on work and more.
Participants also complete a placement test before and after the course to measure the skills they’ve developed.
TEACHING AIDS AND TECHNICAL RESOURCES • The main teaching aids and instructional methods used in the training are audiovisual aids, documentation and course material, hands-on application exercises and corrected exercises for practical training courses, case studies and coverage of real cases for training seminars.
• At the end of each course or seminar, ORSYS provides participants with a course evaluation questionnaire that is analysed by our instructional teams.
• A check-in sheet for each half-day of attendance is provided at the end of the training, along with a course completion certificate if the trainee attended the entire session.
TERMS AND DEADLINES
Registration must be completed 24 hours before the start of the training.
ACCESSIBILITY FOR PEOPLE WITH DISABILITIES
Do you need special accessibility accommodations? Contact Mrs. Fosse, Disability Manager, at psh-accueil@orsys.fr to review your request and its feasibility.
This programme is an original creation, developed by the teaching teams at ORSYS Formation. Any reproduction, representation, adaptation or use, in whole or in part, without the prior written authorisation of ORSYS, is strictly prohibited. ORSYS reserves the right to take any action necessary to protect its intellectual property rights.
Dates and locations
Dernières places
Date garantie en présentiel ou à distance
Session garantie
No session at the moment, we invite you to consult the schedule of distance classes.
20
This programme is an original creation, developed by the teaching teams at ORSYS Formation. Any reproduction, representation, adaptation or use, in whole or in part, without the prior written authorisation of ORSYS, is strictly prohibited. ORSYS reserves the right to take any action necessary to protect its intellectual property rights.