Approved by:
This ISO 27001:2022 foundation training course aims to provide learners who have an existing, basic knowledge of, or experience in, information security management with an understanding of the management systems approach and the requirements of ISO/IEC 27001:2022, and to provide a basis for learners who wish to go on to complete CQI and IRCA or Exemplar Global Certified ISMS Auditor Training courses. Successfully completing the CQI and IRCA or Exemplar Global Certified ISO/IEC 27001:2022 Foundation (ISMS) Training course does not satisfy the training required to become an CQI-IRCA or exemplar Global Certificated ISMS auditor but does prepare learners with an important element of the prior knowledge required to progress to other ISMS Auditor courses.
Loading sessions...

Answer a few quick questions, and we'll match you with tailored training recommendations designed for your career stage and industry.
Recommend prior knowledge:
a) Management systems
The Plan-Do-Check-Act (PDCA) cycle.
b) Information security management
A basic knowledge of the concepts of information security management
c) ISO/IEC 27000
An understanding of commonly used information security management terms and definitions, as given in ISO/IEC 27000: 2022.
To participate in the virtual training sessions, you will need:
This ISO 27001:2022 foundation training course is designed for delegates who have an existing basic knowledge of, or experience in, information security, cyber security and privacy protection management and of the management system approach, but not of ISO/IEC 27001:2022 or for delegates who do not hold a CQI-IRCA or Exemplar Global certified training certificate in ISO/IEC 27001:2022. This ISO 27001 foundation course will help such delegates apply their prior knowledge in order to understand the key information security, cyber security and privacy protection management-related requirements of ISO/IEC 27001:2022 or an acceptable equivalent including the evidence needed to fulfill the standard's requirements. For Virtual (VILT) training, the maximum class size is restricted to 10 learners.

On completion of the ISO 27001 Foundation Course, learners will have the knowledge and skills to:
Explain the purpose and business benefits of an information security management system.
Outline the structure and content of ISO/IEC 27001 and its relationship with ISO/IEC 27000:2022 and ISO/IEC 27002:2022 as part of their ISO 27001:2022 training.
Explain the specific information security management-related requirements of ISO/IEC 27001:2022.
This is a Kelmac Group® Certified Course and is not a CQI-IRCA certified programme. The course is delivered by Kelmac Group® Academy as an ISMS Fundamentals training course based on ISO/IEC 27001:2022. Successful completion confirms that you have achieved the intended learning outcomes relating to ISO/IEC 27001:2022 Fundamentals.
This course is ideal for individuals who are new to ISO/IEC 27001:2022 and want to build a clear understanding of Information Security Management Systems, known as ISMS. It is well suited to professionals who need a practical foundation in information security management in order to support the implementation, maintenance, or continual improvement of an ISMS within their organisation. It is also appropriate for learners who wish to progress to Internal Auditor or Lead Auditor training at a later stage. No prior auditing experience is required; however, an interest in information security, governance, risk, compliance, or management systems would be beneficial.
No prior auditor training is required to attend this course. A general interest in information security management and ISO/IEC 27001:2022 is sufficient. This course is designed as an entry-level foundation programme, making it suitable for those who are new to the subject.
This course is the right level for you if you are new to ISO/IEC 27001:2022 or would benefit from a structured refresher on the standard. It focuses on the purpose, intent, structure, and key requirements of ISO/IEC 27001:2022, including how these support an effective Information Security Management System. It is designed as a foundation-level course to give learners clarity and confidence before progressing to more advanced training, such as Internal Auditor or Lead Auditor courses.
This course is delivered as a one-day learning event, and the delivery format will be confirmed at the time of registration. If your cohort is delivered virtually, the training will take place on the Zoom platform, and you will receive the relevant joining instructions, access details, and platform guidance in advance. To participate effectively, you will need a stable internet connection and a laptop, desktop, iPad, or other tablet device that supports the required platform seamlessly, together with an active web camera and audio access.
The course is designed to be practical and insightful, not just a review of clauses and requirements. It connects ISO/IEC 27001:2022 requirements to real organisational information security management, governance, control, and continual improvement. It also includes guided activities and practical learning to help learners understand how ISMS requirements are applied in practice.
This Fundamentals course includes assessment activities designed to support and confirm learning. Where applicable, learners may complete quizzes, practical exercises, or a final assessment as part of the course learning process. Successful completion of the required learning and assessment activities results in course certification.
After completing the course, you will be able to explain the purpose, intent, structure, and key requirements of ISO/IEC 27001:2022 in practical and easy-to-understand terms. You will also understand how an Information Security Management System supports stronger governance, control, risk management, and continual improvement within an organisation. In addition, you will be better prepared to support ISMS implementation and improvement activities, and to progress with confidence into Internal Auditor or Lead Auditor training.
You will receive a Learner Manual with structured coverage of ISO/IEC 27001:2022 terminology, key requirements, and relevant supporting content. You will also have access to relevant standards, practical exercises, and supporting learning materials designed to help reinforce understanding throughout the course. All course materials, access details, and joining information will be provided as part of the learning event.
This course helps learners understand not only the requirements of ISO/IEC 27001:2022, but also how they relate to real organisational information security governance, risk, and operational control. It is designed to provide a practical and structured learning experience, going beyond basic awareness by linking requirements to application in practice. It also supports learners with a strong foundation that can enable smoother progression into auditor training and wider ISMS responsibilities.
An ISO 27001 Foundation course provides an introduction to the key concepts, principles, and requirements of ISO/IEC 27001:2022. It helps participants understand what an Information Security Management System (ISMS) is, how it is structured and how ISO 27001 supports the protection of information security, cyber security and privacy across multiple industries.
ISO 27001:2022 training typically covers the purpose, aims and principles of an ISMS, the aims, structure and key requirements of ISO/IEC 27001:2022, including its relationship with related standard, ISO/IEC 27002:2002 encompassing the Information security controls, and four control themes, namely (1) Organizational (2) People (3) Physical and (4) Technological and attributes.
You will learn the fundamental concepts and requirements of ISO/IEC 27001:2022, including how an ISMS is established, implemented, maintained, and continually improved. The course also helps you understand how organizations identify and manage information security risks within an ISO 27001 framework. It will also help the participant understand the importance and relationship with ISO/IEC 27002:2022, the best practice controls, themes and attributes.
Yes. An ISO/IEC 27001 Foundation course is designed to provide a foundational understanding of ISO/IEC 27001:2022 and ISO/IEC 27002:2022 and can be suitable for professionals who are new to the standard. It can also benefit employees, managers, information security professionals, and others who want to understand the fundamentals of information security management, cyber security and privacy and how it is being adopted by various industries.
ISO 27001:2022 Foundation training can strengthen your understanding of information security management systems and provide useful knowledge for roles involving information security, risk management, compliance, governance, quality, and management systems. It can also provide a foundation for progressing to more advanced ISO 27001 training and auditing courses.
To participate in the virtual training sessions, you will need:

Upon successful completion, each learner shall receive a digital Certificate of Completion that is recognized globally.