ISO/IEC 27001 Introduction is a short and practical course designed to give participants a basic understanding of information security and the internationally recognised ISO/IEC 27001 standard. This introductory course is ideal for anyone who wants to get an overview of the standard’s structure, common terminology and key concepts that underpin an Information Security Management System (ISMS).
This course provides a clear entry-level overview of the most important elements of ISO/IEC 27001, focusing on why and how organisations implement information security management systems. Through explanations, examples and interactive discussions, participants will learn about the purpose of ISO/IEC 27001, how it relates to risk, how security controls support governance, and where this standard fits with other compliance frameworks. It is perfect for team members, stakeholders and newcomers who need a solid introduction without deep technical detail.
Course objectivesUpon completing this course, participants will be able to:
PrerequisitesThere are no prerequisites for this course. No prior experience with ISO/IEC 27001 or information security is required.
Target audienceThis course is suitable for anyone who needs an introductory understanding of ISO/IEC 27001 or information security in general, including new team members, support functions, business stakeholders and non-technical staff.

This section introduces participants to fundamental concepts of information security, including confidentiality, integrity and availability. Delegates learn why structured approaches to security are essential to safeguard assets and maintain trust.
Participants receive an overview of ISO/IEC 27001, including its purpose, scope and how it supports organisational objectives. This part also explains how the standard is structured and how it aligns with management system principles.
This part of the course introduces the basics of risk assessment and treatment in the context of ISO/IEC 27001. Participants learn how risk is defined, how it drives control selection and how controls contribute to protecting information assets.
Participants explore how ISO/IEC 27001 connects with related frameworks and standards, such as ISO/IEC 27002, GDPR, Cyber Security practices and general governance models, helping to place information security in broader organisational contexts.
Interactive discussions focus on how organisations implement and maintain an ISMS, practical challenges, roles and responsibilities, and how information security awareness can be embedded across teams.

Duration: 1 day
Price: 7 900 NOK
Language: English
Format: Open course and corporate training
Hva lærer jeg på dette kurset?
Du får en grunnleggende introduksjon til informasjonssikkerhet og ISO/IEC 27001, inkludert formål, struktur, nøkkelbegreper og hvordan standarden brukes i praksis.
Hva kreves for å delta?
Ingen forkunnskaper kreves. Dette er et introduksjonskurs for nybegynnere.
Er dette kurset relevant for ledere?
Ja, kurset er relevant for ledere, støtte- og fagfunksjoner som ønsker innsikt i informasjonssikkerhet og ISO/IEC 27001.
Hvordan kan dette kurset hjelpe meg videre?
Kurset gir et solid utgangspunkt før du går videre til mer avanserte ISO/IEC 27001-kurs som Foundation, Implementer eller Auditor.
Kan jeg ta dette kurset som e-læring eller selvstudium?
Ja, dette kurset tilbys også som e-læring. Påmelding kan registreres på høyre side.
