ISO/IEC 27001:2022 — Lead Implementer and Internal Auditor
Exam ISO 27001:2022 PECB, BSI or IRCA Intermediate
The international standard for information security management. It is the organisation that gets certified, and customers' security questionnaires ask whether yours is; these courses teach you to implement an ISMS to the standard and audit it internally.
5 courses · 34 sections · 290 lectures · 7 labs · ≈ 9 h of hands-on labs
All 7 ISO 27001:2022 hands-on labs on one page →
Free to start: the free lessons and guides for this roadmap →
Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Understand the standard
The clauses, Annex A controls and what certification involves.
1 course · 10 sections · 47 lectures
Learn
- CourseGetting Started with ISO 27001:2022 (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
10 sections · 47 lectures
- Training Overview 2
- Section 1: Why ISO/IEC 27000 Series 6
- Section 2: What is ISO/IEC 27001:2022 9
- Section 3: What is ISO/IEC 27005:2022 1
- Section 4: ISO/IEC 27001 Annex A controls 8
- Section 5: What is ISO/IEC 27002 3
- Section 6: New controls in ISO/IEC 27002:2022 11
- Section 7: Mapping ISO 27001:2013, ISO 27001:2022 and NIST CSF 3
- Section 8: ISO/IEC 27001:2022 Transition and Implementation Guide 3
- Audio Version of the Training 1
Step 2 — Implement an ISMS
Build the management system, not just the paperwork, with risk assessment and treatment (clauses 6.1.2 and 8.2) done the ISO 27005 way.
3 courses · 12 sections · 134 lectures
Learn
- CourseISO/IEC 27001:2022 Lead Implementer (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 112 lectures
- Training Overview 1
- Domain 1 18
- Domain 2 14
- Domain 3 14
- Domain 4 32
- Domain 5 12
- Domain 6 8
- Domain 7 12
- Audio Version of the Training 1
- CourseISMS Implementation - ISO 27001 WorkShop (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
2 sections · 11 lectures
- Training Overview 2
- ISMS Implementation - ISO 27001 Project 9
- CourseInformation Security Risk Management (ISO 27005) (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
1 section · 11 lectures
- Information Security Risk Management (ISO 27005) 11
Step 3 — Audit it
Run an internal audit and evidence conformity. The labs are the audit and control ones, among them Comparing Controls, and Monitoring and Verifying Management Systems.
1 course · 12 sections · 109 lectures · 7 labs
Learn
- CourseISO 27001: 2022 Internal Auditor Course (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
12 sections · 109 lectures
- Training Overview 1
- Introduction 1
- Module 1 - Introduction to ISO 27001 12
- Module 2 - The planning phase 15
- Module 3 - Risk management 10
- Module 4 - The Do phase 10
- Module 5 - The Check and Act phases 8
- Module 6 - Overview of Annex A 15
- Module 7 - Introduction to the internal audit 11
- Module 8 - Organizing the internal audit 7
- Module 9 - Internal audit elements 8
- Module 10 - The main audit 11
Practise
- LabsCritical Security Controls — 7 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Auditing Service Accounts and Setting Up Automated Log CollectionDuration: 2 h
- CIRP Creation and DisasterDuration: 2 h
- Comparing ControlsDuration: 1 h
- Creation of Standard Operating Procedures for RecoveryDuration: 1 h
- Identifying Key AssetsDuration: 1 h
- Monitoring and Verifying Management SystemsDuration: 1 h
- Sensitive Information IdentificationDuration: 1 h
