Maintaining an ISO/IEC 27001:2022 certification is just the beginning of the information security journey. This course is designed for professionals responsible for sustaining, improving, and evolving an ISMS (Information Security Management System) after certification. Whether you're preparing for surveillance audits, running risk reviews, or improving policy effectiveness, this course will equip you with practical tools and strategic insight to ensure long-term ISMS success.

Through real-world scenarios and downloadable templates, you’ll learn how to manage post-certification activities such as internal audits, performance tracking, corrective actions, and continuous improvement initiatives. You'll also gain hands-on experience using six professional-grade tools, including an ISMS Sustainment Checklist, Management Review Summary, KPI Tracker, Corrective Action Log, Incident Learning Report, and a 3-year ISMS Roadmap Planner. These resources are aligned with ISO/IEC 27001 Clauses 9 and 10, ensuring you stay compliant and audit-ready.

We'll follow the journey of a fictional company, SecureCom Ltd., as they navigate ISMS challenges in Year 2 of certification. You’ll complete a capstone project where you’ll apply everything you’ve learned to build a realistic ISMS sustainment strategy—perfect as a portfolio piece or internal proposal.

This course is ideal for:

• ISMS Managers and ISO 27001 implementers

• Internal and external auditors

• GRC and compliance professionals

• Information Security Officers

• Teams preparing for surveillance or recertification audits

ISMS Managers and ISO 27001 implementers

Internal and external auditors

GRC and compliance professionals

Information Security Officers

Teams preparing for surveillance or recertification audits

By the end of the course, you’ll be able to confidently manage ISMS operations, communicate with stakeholders, and demonstrate continual improvement—all while using professional templates that save time and increase consistency.

Whether you are managing your organization’s ISMS, consulting on ISO standards, or preparing for audit roles, this course helps you move from compliance to leadership in information security governance.

Enroll now and take the next step in becoming a trusted ISMS professional.