ISO 27001 Information Security – Lead Implementer
Plan and implement an ISO 27001 information security management system, including risk assessment and Annex A controls.

At a glance
- 5 days
Who it's for
- Information security managers
- IT managers
- Consultants
Learning objectives
- Define ISMS scope and context
- Run an information security risk assessment
- Select and implement Annex A controls
- Prepare for certification
Detailed content
- Interested parties
- Scope boundaries
- Leadership and policy
- Asset inventory
- Threats and vulnerabilities
- Risk evaluation
- Control selection
- Implementation plan
- Awareness
- Monitoring and metrics
- Internal audit and review
- Certification audit
Day-by-day agenda
A typical schedule. In-company versions are tailored to your processes, data and timing.
- ISMS scope and context
- Risk assessment
- Annex A controls
- Certification readiness
- Practical workshop applying the tools to participants' cases
- Case study, action plans and course assessment
Practice, tools and assessment
Hands-on practice
- Facilitate a team FMEA/risk assessment on one of your processes
- Rank risks with severity–occurrence–detection or risk matrix
- Prompt-engineering lab on real work tasks
- Map a process and identify automation / AI use cases with ROI
Tools and templates you keep
- AIAG-VDA FMEA form and action-priority table
- Risk register and risk matrix (Excel)
- Prompt library for your role
- Use-case canvas and ROI template
How learning is assessed
- Pre- and post-course knowledge check
- Assessment of practical exercises by the trainer
- Action plan reviewed at the end of the course
Built on these standards and bodies of knowledge
- AIAG & VDA FMEA Handbook (2019)
- ISO 31000 / IEC 31010
- NIST AI Risk Management Framework
Certificate
Participants who complete the program and its assessment receive a certificate from The Excellence Center, which can be verified online.
New in our 2026 portfolio — tell us your dates and we will confirm the trainer and schedule.
How it is delivered
- Public courses in Cairo, in-company programs and live online training
- Practical exercises, case studies and examples from your sector
- Can also run as Train & Stay in Sharm El Sheikh, Hurghada or Cairo
Frequently asked questions
How long is ISO 27001 Information Security – Lead Implementer?
The program runs 5 days. In-company versions can be adapted to your needs.
Is the course taught in Arabic or English?
Sessions are usually delivered in Arabic with English technical terms and materials. Full English delivery is available for in-company groups.
Can you run it inside our company?
Yes. In-company programs use exercises built on your own processes. Tell us the group size and preferred timing and we will send a proposal.
Will I receive a certificate?
Participants who complete the program and its assessment receive a certificate from The Excellence Center, which can be verified online.
More programs in this field
- Integrated Internal Auditor for ISO Standards (ISO 9001, 22301, 41001, 50001 & ISO 26000 guidance)4 days
- Integrated Management Systems Internal Auditor (ISO 9001, ISO 14001 & ISO 45001)5 days
- ISO 14001:2026 – Implementing the Changes (Transition)1–2 days
- ISO 45001:2018 OH&S Management System – Internal Auditor2 days
- ISO 45001:2018 OH&S Management System – Lead Auditor5 days
- ISO 9001:2026 Internal Quality Auditing3 days
- ISO 9001:2026 QMS Lead Auditor5 days
- ISO Management Systems – Foundation, Internal Auditor & Lead Auditor Courses1 day
- ISO/IEC 17025:2017 – Laboratory Competence (Requirements, Method Validation, Uncertainty & Internal Audit)5 days
Get dates, fees and the full outline.
Tell us whether you are joining as an individual or planning a program for your team.
