Start free

← Free roadmaps

Free ISO/IEC 27001:2022 — Lead Implementer and Internal Auditor Roadmap

The international standard for information security management. It is the organisation that gets certified, and customers' security questionnaires ask whether yours is; these courses teach you to implement an ISMS to the standard and audit it internally.

3 steps · 13 free videos · 1 free read

Start step 1 →

Create your free account to open all 2,396 free items

The 14 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.

Create free account →Already have an account? Sign in

The free roadmap

3 steps, in order

The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually).

  1. Start here →

    Step 1 — Understand the standard

    The clauses, Annex A controls and what certification involves.

    🔒 The full roadmap adds here: 1 full course (Membership)
    • Course · Getting Started with ISO 27001:2022 · 🔒 Membership
    See this step on the full roadmap →

    Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.

  2. Step 2 — Implement an ISMS

    Build the management system, not just the paperwork, with risk assessment and treatment (clauses 6.1.2 and 8.2) done the ISO 27005 way.

    🔒 The full roadmap adds here: 3 full courses (Membership)
    • Course · ISO/IEC 27001:2022 Lead Implementer · 🔒 Membership
    • Course · ISMS Implementation - ISO 27001 WorkShop · 🔒 Membership
    • Course · Information Security Risk Management (ISO 27005) · 🔒 Membership
    See this step on the full roadmap →
  3. Step 3 — Audit it

    Run an internal audit and evidence conformity. The labs are the audit and control ones, among them Comparing Controls, and Monitoring and Verifying Management Systems.

    🔒 The full roadmap adds here: 1 full course · hands-on labs 1–7 of 7 (Membership)
    • Course · ISO 27001: 2022 Internal Auditor Course · 🔒 Membership
    • Lab 1 of 7 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
    • Lab 2 of 7 · CIRP Creation and Disaster · 🔒 Membership
    • Lab 3 of 7 · Comparing Controls · 🔒 Membership
    • Lab 4 of 7 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
    • Lab 5 of 7 · Identifying Key Assets · 🔒 Membership
    • Lab 6 of 7 · Monitoring and Verifying Management Systems · 🔒 Membership
    • Lab 7 of 7 · Sensitive Information Identification · 🔒 Membership
    See this step on the full roadmap →
Do it hands-on

The full ISO/IEC 27001:2022 — Lead Implementer and Internal Auditor roadmap

The same steps with every course and the hands-on labs, and your progress tracked.

The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytime
Advanced

AI-Driven Security Engineering

Become the Cyber Security Expert the AI Era Needs.

StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”

Explore the AI Master’s →
2,396 free items open with a free accountCreate free accountSign in