Skip to content
Certanika
FreeInformation Security

ISO/IEC 27001 Fundamentals

Learn the purpose, structure and core requirements of an information security management system.

22 minutesBeginnerSelf-pacedQuiz includedCertificate included

No payment details required. Progress is saved to your Certanika account.

ISO/IEC 27001 FundamentalsRecordedISO/IEC 27001 Fundamentals

What you will learn

  • Describe an ISMS
  • Recognise clauses 4-10
  • Explain Annex A and the Statement of Applicability

Who this course is for

Beginners, students and working professionals who want a concise, practical introduction before moving into deeper role-based or standards training.

Course outline

  1. 1

    Information security management systems

    Understand the risk-based management-system approach to protecting information.

    3 min
  2. 2

    ISO/IEC 27001 structure

    Recognise the standard's requirement clauses and control reference.

    3 min
  3. 3

    Clauses 4 to 10

    Follow the system from organisational context to continual improvement.

    3 min
  4. 4

    Risk assessment

    Use consistent criteria to identify and evaluate information security risk.

    3 min
  5. 5

    Statement of Applicability

    Record which controls apply and why they are included or excluded.

    3 min
  6. 6

    Annex A controls

    Explore the organisational, people, physical and technological control themes.

    3 min
  7. 7

    Internal audit

    Check whether the ISMS conforms and operates effectively.

    2 min
  8. 8

    Certification journey

    Distinguish readiness, Stage 1, Stage 2 and surveillance activities.

    2 min