Home / All Courses / ISO/IEC 27001 Information Security Management Systems Awareness
ISO/IEC 27001 Information Security Management Systems Awareness

A practical, visual introduction to ISO/IEC 27001, the international standard for information security management systems. Learn what an ISMS is and what certification actually covers, how scope and the Statement of Applicability work, what the four Annex A control themes contain, how information security risk is assessed and treated and which controls depend on the everyday behaviour of ordinary staff. Written for people working in a certified organisation, or one heading that way, with no technical background assumed.
What You Will Learn
- Explain what an information security management system is and what an ISO/IEC 27001 certificate actually covers
- Describe how the scope of an ISMS is set and what a Statement of Applicability is for
- Identify the four Annex A control themes and the kinds of control each one contains
- Describe how information security risk is assessed and the options for treating it
- Recognise the controls that depend on your own daily habits, and how to report a security event
Course Content
- ISO/IEC 27001 in plain English
- By the end of this course, you'll be able to:
- Information security protects three things
- ISO/IEC 27001 is the standard for managing that, deliberately
- This is not an IT project
- Why organisations certify
- Seven clauses carry the requirements
- Scope decides what the certificate means
- How the system gets built
- The Statement of Applicability is the document that ties it together
- Annex A is a reference set, not a checklist to complete
- The 2022 edition reorganised the controls
- The four themes
- What each theme contains
- New controls came in for newer risks
- Reading Annex A well, and badly
- Risk assessment drives everything else
- The risk assessment process
- Four common ways to treat a risk
- Accepting a risk is a decision, not a shrug
- Suppliers and cloud services carry your risk too
- Several controls only work if you make them work
- Classification tells you how to treat information
- Access, and why yours is limited
- Everyday habits that carry the system
- Reporting fast is the control that saves you
- Now put it together
- A certified organisation, an ordinary week
- The five things to carry away
Who This Course Is For
All staff, supervisors, managers and contractors in an organisation certified to ISO/IEC 27001 or working towards certification, including people with no technical or IT background.
Written by Kam Askari, Managing Director of Creative Directions Management Consulting Pty Ltd, ISO 9001, ISO 14001 and ISO 45001 Lead Auditor. MBA, Graduate Diploma in Occupational Health and Safety, MAICD. Checked against the sources listed below.
Sources and Legal References
This course is aligned to 3 official sources. Legal and regulatory references checked 2 September 2026.
Sources and Further Reading
This course draws on the following official sources. Always rely on the current version on the regulator’s website.
- Australian StandardISO/IEC 27001:2022, Information security, cybersecurity and privacy protection, Information security management systems, RequirementsAs at 02/09/2026
- Australian StandardISO/IEC 27002:2022, Information security, cybersecurity and privacy protection, Information security controlsAs at 02/09/2026
- Australian StandardISO/IEC 27001:2022/Amd 1:2024 Climate action changesAs at 02/09/2026
Always rely on the current version on the regulator’s website.
Seven day refund if you have not started
Or
For employers and teams
Buy Seats for Your Team
$59.00 per seat, inc GST
Total inc GST$295.00
Or
What You Get
Certificate of Completion
This is to certify that
has successfully completed
All learning modules and the final assessment
Kam Askari
Director, Creative Directions Management Consulting Pty Ltd
This is a certificate of completion of a non-accredited professional development course. It is not a nationally recognised qualification, a VET statement of attainment, a competency card, a licence, or evidence of competency. It is issued by Creative Directions Management Consulting Pty Ltd, which is not a Registered Training Organisation.
Sample layout. Certificate ID WP-SAMPLE-0001 verifies as Hazardous Manual Tasks and Manual Handling Safety.
- Certificate verified by its ID
- 100% online, self-paced
- Six months of access
Bought for yourself: six months of access from the day you pay. Team seat: six months from the day the worker activates their code.
Suggested Next Courses

ISO 14001:2015 Environmental Management Systems Awareness
40 minutes
Online, self-paced

ISO 14001:2026 Environmental Management Systems Awareness
40 minutes
Online, self-paced
