Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
ISO 27001-2022: Sustaining the ISMS Post-Certification
Role Play
Rating: 4.0 out of 5(11 ratings)
2,324 students

ISO 27001-2022: Sustaining the ISMS Post-Certification

Maintain, monitor, and improve your ISO 27001-certified ISMS with audits, KPIs, reviews, and real-world templates
Role Play
Created byDr. Amar Massoud
Last updated 6/2026
English
English [Auto],

What you'll learn

  • Maintain and improve an ISO/IEC 27001-certified ISMS beyond initial certification
  • Apply ISO 27001 Clause 9 and 10 through audits, reviews, and continual improvement
  • Use practical templates to track ISMS KPIs, risks, incidents, and compliance tasks
  • Develop a full ISMS sustainment strategy using real-world post-certification tools

Course content

6 sections • 14 lectures • 1h 15m total length

  • Introduction4:11

    Learn how to sustain and improve your ISMS post certification by embedding ISMS activities into daily operations, conducting internal audits, and tracking KPIs for surveillance and recertification readiness.

  • Model Company – SecureCom Ltd1:50

    follow secure com limited as a model to learn sustaining the isms after iso 27001-2022 certification across distributed teams, including EMS sustainment plan and audit cycles.

Requirements

  • Basic knowledge of ISO/IEC 27001 is recommended but not required; templates and guidance are provided

Description

Maintaining an ISO/IEC 27001:2022 certification is just the beginning of the information security journey. This course is designed for professionals responsible for sustaining, improving, and evolving an ISMS (Information Security Management System) after certification. Whether you're preparing for surveillance audits, running risk reviews, or improving policy effectiveness, this course will equip you with practical tools and strategic insight to ensure long-term ISMS success.

Through real-world scenarios and downloadable templates, you’ll learn how to manage post-certification activities such as internal audits, performance tracking, corrective actions, and continuous improvement initiatives. You'll also gain hands-on experience using six professional-grade tools, including an ISMS Sustainment Checklist, Management Review Summary, KPI Tracker, Corrective Action Log, Incident Learning Report, and a 3-year ISMS Roadmap Planner. These resources are aligned with ISO/IEC 27001 Clauses 9 and 10, ensuring you stay compliant and audit-ready.

We'll follow the journey of a fictional company, SecureCom Ltd., as they navigate ISMS challenges in Year 2 of certification. You’ll complete a capstone project where you’ll apply everything you’ve learned to build a realistic ISMS sustainment strategy—perfect as a portfolio piece or internal proposal.

This course is ideal for:

  • ISMS Managers and ISO 27001 implementers

  • Internal and external auditors

  • GRC and compliance professionals

  • Information Security Officers

  • Teams preparing for surveillance or recertification audits

By the end of the course, you’ll be able to confidently manage ISMS operations, communicate with stakeholders, and demonstrate continual improvement—all while using professional templates that save time and increase consistency.

Whether you are managing your organization’s ISMS, consulting on ISO standards, or preparing for audit roles, this course helps you move from compliance to leadership in information security governance.

Enroll now and take the next step in becoming a trusted ISMS professional.

Who this course is for:

  • Information Security Managers, ISO 27001 implementers and auditors, GRC professionals, and IT/compliance officers seeking to maintain, improve, and mature their ISMS after achieving certification

Report abuse