The new version of ISO/IEC 27001 has been recently published and is now aligned with the new version of ISO/IEC 27002. The major changes between ISO/IEC 27001:2022 and ISO/IEC 27001:2013 are noticed in the information security controls of Annex A, whereas a few other minor changes are present in the clauses of the standard too.

Furthermore, the title of ISO/IEC 27001:2022 differs from the title of ISO/IEC 27001:2013, as now the standard is titled Information security, cybersecurity and privacy protection — Information security management systems — Requirements.

The ISO/IEC 27001 ISMS Transition training course provides detailed information on the revised clauses, the new terminology, and the differences in the controls of Annex A. Additionally, this training course provides participants with the necessary knowledge to support organizations in planning and implementing the changes in their ISMS to ensure conformity with ISO/IEC 27001:2022. As such, you will be able to participate in projects to transition from an ISMS based on ISO/IEC 27001:2013 to an ISMS based on ISO/IEC 27001:2022.

At the end of this course participants should be able to

• Explain the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022
• Interpret the new concepts and requirements of ISO/IEC 27001:2022
• Plan and implement the necessary changes to an existing ISMS in accordance with ISO/IEC 27001:2022

Course Outline

Introduction to ISO/IEC 27001:2022 and comparison to ISO/IEC 27001:2013

• Training course objectives and structure
• Standards and regulatory frameworks
• Overview of the changes between ISO/IEC 27001:2013 and ISO/IEC 27001:2022
• Changes in clauses 4 to 10 of ISO/IEC 27001

Comparison between Annex A controls of ISO/ IEC 27001:2013 and ISO/ IEC 27001:2022

• Annex A- Organizational controls
• Annex A- People controls
• Annex A- Physical controls
• Annex A- Technological controls
• Organizational controls
• Closing of the training course

Delivery Methodologies

• Online Lecture
• Individual activities
• Plenary Discussions

• 2 days ( 4 hour per session)

Delivery Methodologies

• Lecture
• Individual activities
• Plenary Discussions

This course is recommended for

• Information Security team members
• Individuals responsible for Information Security, compliance, and risk within an organization
• Individuals implementing ISO/IEC 27001, seeking to comply with ISO/IEC 27001 or involved in a risk management program
• IT consultants, IT professionals
• Information Security officers
• Privacy officers