Reviews 4,2
Reviews 4,5
Information Security Officer / CISO (DIN EN ISO/IEC 27001)
Cyber threats, regulatory requirements, and digital transformation are making information security a leadership responsibility. ISOs and CISOs bear responsibility for strategies that ensure lasting protection and operational continuity.
Key topics
- Strategically embedding information security: building governance structures and responsibilities.
- Assessing and managing risks: applying compliance requirements and international standards.
- Designing security architectures for cloud, hybrid, and AI environments.
- Shaping identity and access management using the zero trust principle.
- Strengthening response capabilities: planning incident response and business continuity.
- Coordinating legal, organizational, and technical protective measures.
Prerequisite
Suitable for those with several years of practical experience in IT or IT security who are familiar with modern IT architectures and ready to take on strategic responsibility.
Target group
For anyone in IT security, risk management, compliance, or corporate leadership who bears decision-making responsibility or is growing into such roles.
A strategic understanding of information security leads to more effective protection. The course builds the foundation for sound decisions and lasting security in networked environments.
Course content
Standards and security systems at a glance
- Relevant guidelines, standards, and models for the ISMS at a glance.
ISO/IEC 27001 as a unified management framework
Regulations, standards, and their practical relevance
ISMS controls and current standard updates
- Overview of the 93 ISMS controls from Annex A.
- Recent standard changes and their practical implications.
Understanding and interpreting standards requirements
Applying key criteria and important standards
- Effectively implementing ISMS key criteria in operational practice.
Certification and audit processes based on ISO/IEC 27001
- Getting to know certification options for ISO/IEC 27001 and the internal and external audit process.
Final exam: preparation and knowledge assessment
- Final examination for knowledge assessment and certification preparation.
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
What roles do an ISO and CISO play in an organization?
- ISOs and CISOs manage information security within the organization. Their goal is to provide lasting protection for data, IT systems, and business processes against cyberattacks, data loss, and regulatory risks.
What does the DIN EN ISO/IEC 27001:2024-01 standard stand for?
- The standard sets out international requirements for an information security management system. Version 2024-01 accounts for current threat scenarios, cloud environments, and modern IT structures.
What contribution do ISOs and CISOs make to organizational security?
- They reduce risks, build trust with customers and partners, and help meet legal requirements. A structured security process provides lasting protection for business operations.
What activities belong to the CISO role under ISO/IEC 27001?
- CISOs conduct risk analyses, create security policies, coordinate training, monitor measures, and prepare for audits in accordance with ISO/IEC 27001.
Which organizations benefit from ISO 27001?
- The standard suits organizations of all sizes and industries – especially where sensitive data, cloud services, IT dependency, or high compliance requirements are a focus.
What do organizations gain from ISO 27001 certification?
- Structured processes, better risk control, greater data security, and recognized verification for customers, authorities, and partners are among the key benefits.
What ensures sustainably effective information security?
- Regular reviews, adaptation to new threat landscapes, clearly defined responsibilities, and continuous development of security measures.
