Understand the requirements of ISO/IEC 27001:2022, the 93 Annex A controls and ISO/IEC 27002 guidance, and how an organization prepares for certification by an accredited body.
The ISO 27001 Fundamentals course in Doha, Qatar introduces ISO/IEC 27001:2022, the international standard that specifies requirements for an information security management system (ISMS). Learners work through clauses 4 to 10, the risk-based approach at the heart of the standard, and the 93 Annex A controls grouped into organizational, people, physical and technological themes. The course also explains how ISO/IEC 27002 provides implementation guidance for each control and how the Statement of Applicability links risks to selected controls.
This is a fundamentals course, not a lead auditor or lead implementer certification. It explains accurately how organizations, not individuals, are certified against ISO/IEC 27001 by independent certification bodies that hold accreditation from national accreditation bodies, through stage 1 and stage 2 audits followed by surveillance audits. Sessions combine short explanations with exercises such as reading clause requirements, drafting a scope statement and mapping risks to Annex A controls. The course can be run as an in-house program for organizations planning or maintaining ISO/IEC 27001 certification.
By the end of this course, participants will be able to:
Explain the purpose, structure and terminology of ISO/IEC 27001:2022
Interpret the requirements of clauses 4 to 10, including leadership, planning and performance evaluation
Identify the four Annex A control themes and give examples of controls in each
Describe how ISO/IEC 27002 guidance supports control selection and implementation
Prepare a basic ISMS scope statement and Statement of Applicability outline
Outline the certification process run by accredited certification bodies, from stage 1 audit to surveillance
This course is intended for anyone who needs a clear grounding in ISO/IEC 27001 before contributing to an ISMS project or audit.
Staff joining an ISO/IEC 27001 implementation team
IT and information security professionals new to the standard
Quality, risk and compliance officers
Managers and control owners responsible for Annex A controls
Consultants and auditors seeking an introduction to the ISMS standard
Purpose of ISO/IEC 27001, 27002 and related standards
Key changes in the 2022 edition of ISO/IEC 27001
Annex SL harmonized structure shared with other ISO standards
Benefits and limits of ISMS certification
Context of the organization, interested parties and ISMS scope
Leadership commitment, information security policy and roles
Planning: risk assessment, risk treatment and security objectives
Support, operation, performance evaluation and improvement
Mandatory documented information
Organizational, people, physical and technological control themes
New 2022 controls such as threat intelligence and data masking
Using ISO/IEC 27002 attributes and implementation guidance
Building and justifying the Statement of Applicability
Typical implementation roadmap and project roles
Gap assessment against the standard's requirements
Internal audit programs and management review inputs
Nonconformities, corrective actions and continual improvement
Role of accredited certification bodies and accreditation bodies
Stage 1 documentation review and stage 2 audit
Surveillance audits and recertification cycle
Preparing staff and evidence for external audits
Organizations in Qatar's banking, energy, telecommunications and government sectors often face customer and partner expectations to demonstrate structured information security, and ISO/IEC 27001 is a widely recognized way to do so. As digital government services and data centers expand in line with Qatar National Vision 2030, staff who understand the standard help their organizations build an ISMS that also supports national cybersecurity guidance from Qatar's National Cyber Security Agency and prepares them for independent certification audits.
Join a scheduled class at our training center in Doha or attend live online. For organizations, the course can run as an in-house program at your premises or online, tailored to your sector, examples and schedule.
It is an introductory course in Doha, Qatar on ISO/IEC 27001:2022. It explains the ISMS requirements in clauses 4 to 10, the Annex A controls, ISO/IEC 27002 guidance and the process organizations follow to achieve certification.
It is useful for members of an ISO/IEC 27001 project team, IT and security staff, compliance and quality officers, control owners and managers who need to understand what the standard requires before an implementation or audit.
No. This is a fundamentals course, not a lead auditor or lead implementer credential. Organizations are certified only by independent certification bodies accredited to audit against ISO/IEC 27001. The course helps you understand and prepare for that process.
Yes. It can be delivered at your premises or online and tailored to your sector, examples and schedule, including your planned ISMS scope and certification timeline. Contact Leaders Training Center to plan the training.
Tell us a little about yourself and an advisor will contact you about batch timings, fees and eligibility. No obligation.
Sat–Thu: 09:00–22:00Fri: 08:00–22:00
Build a solid technical grounding in cybersecurity: core security principles, common threats, network and endpoint defenses, identity controls and the frameworks IT teams use to manage risk.
Learn how attackers find and exploit weaknesses, and practice reconnaissance, scanning, enumeration and basic exploitation in an isolated lab, always within legal authorization and an agreed scope.
Learn to plan, run and report a structured penetration test, from scoping and rules of engagement through network, web and Active Directory testing in a lab to risk-rated findings.
Prepare for the CompTIA Security+ exam by working through its domains, from threats and security architecture to operations and governance, with labs, scenario questions and practice reviews.
