ISO/IEC 27001:2022 Readiness

Become the specialist enterprises trust to lead ISO 27001 certification from initial scoping to audit day. Master the 93 Annex A security controls, build a resilient Information Security Management System (ISMS), and conduct rigorous internal gap audits.

Live online 10 to 35 hours Beginner to intermediate Small cohorts

What you will be able to do

The skills employers screen for in ISO 27001 roles, practised through live case work rather than slides.

ISMS Scope Definition & Context Mapping
Annex A 2022 Controls Implementation
Statement of Applicability (SoA) Formulation
Internal Audit & Stage 1/2 Readiness

Curriculum

Delivered across live sessions. The depth of each module scales with the plan you choose.

1How ISO 27001:2022 is structured
  • Clauses 4 to 10 and what each asks for
  • Annex A themes: organisational, people, physical, technological
  • What changed from the 2013 version
2Context and scope
  • Interested parties and their requirements
  • Writing a scope statement
  • Boundaries and interfaces
3Risk assessment and treatment
  • The ISO 27005 approach
  • Treatment options and risk owners
  • Building the risk treatment plan
4Annex A controls and the Statement of Applicability
  • Selecting and justifying the 93 controls
  • Using ISO 27002 implementation guidance
  • Writing the SoA
5Running the ISMS
  • Mandatory documented information
  • Objectives, metrics and management review
  • Collecting evidence with Vanta and Drata
6Internal audit and certification
  • Planning an internal audit programme
  • Stage 1 versus Stage 2 audits
  • Nonconformities and corrective action
7Capstone and interview preparation
  • Produce an SoA and risk treatment plan
  • Run a simulated Stage 1 gap audit

Frameworks and tools you will use

The standards and platforms named in real job descriptions for this field.

ISO/IEC 27001:2022ISO 27002ISO 27005VantaDrata

Your portfolio deliverable

Draft a complete Statement of Applicability (SoA) mapped to ISO 27001:2022, construct an ISMS Risk Treatment Plan, and conduct a simulated Stage 1 gap audit with findings log.

Where this track leads

Roles our ISO 27001 learners prepare for, with median salaries in the US and UK.

ISO 27001 Lead Implementer

Most common first role from this track

$115,000 / £80,000

Security Compliance Manager

Also within reach

$125,000 / £88,000

ISMS Lead Auditor

Also within reach

$110,000 / £75,000

Salary figures are indicative US and UK medians and vary by city, employer and experience.

Who this track is for

Students and fresh graduatesStart a security career without years of technical experience.
Career switchersMove from IT, audit, legal, finance or operations into GRC.
Working professionalsFormalise skills you already use and target senior roles.
International studentsPrepare for US, UK and remote roles with market-specific coaching.

Questions about the ISO 27001 track

Do I need a technical background for the ISO 27001 track?

No. We explain the standard clause by clause. People with some IT or compliance exposure move faster, but it is not required.

Is the training live or recorded?

Live. Every session is taught online by a practitioner in real time, with time for questions and case work. There are no pre-recorded lectures.

How many hours of training do I get?

That depends on the plan you choose: Node is 10 hours, Lattice is 20 hours and Nexus is 35 hours. Nexus also includes all six tracks.

What will I have built by the end?

Draft a complete Statement of Applicability (SoA) mapped to ISO 27001:2022, construct an ISMS Risk Treatment Plan, and conduct a simulated Stage 1 gap audit with findings log.

Do you help with finding a job?

Yes. Lattice and Nexus include ATS-friendly resume rebuilding, LinkedIn profile updates, a mock interview and ongoing career mentorship. Nexus adds 1-on-1 executive coaching and priority placement support.

Is a certification exam included?

You receive an OMNyra certificate of completion. External certification exams and their fees are not included. If you plan to sit ISO 27001 Lead Implementer or Lead Auditor, ask on your free call how this track maps to it.

Is there a discount for groups?

Yes. Friends or colleagues enrolling together as a group of 3 or more get group pricing, and organisations can book a dedicated cohort with custom scheduling.

Not sure ISO 27001 is the right fit?

Book a free 1-on-1 call. We will look at your background and target market, then recommend a track and plan.

Chat with us