Bestseller

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Implementer

Build an audit-ready ISMS in 12 steps with an ISO 27001 auditor: 400+ task project plan, templates, weekly Live Q&A and TRECCERT exam prep.

Build an audit-ready ISMS in 12 steps with an ISO 27001 auditor: 400+ task project plan, templates, weekly Live Q&A and TRECCERT exam prep.

var(--variable-VMf5bJCNJ.dZZGCFK1_)

Created by Aron Lange

English

4.7

4,795+ ratings

25,100+

students enrolled

TRECCERT

approved Trainer

€69

/ month

incl. 19% VAT · billed monthly

Add the Certification Bundle

€728

one-time

12 hour Video Course

ISO 27001 Toolkit

Practice Exam

Weekly Live Q&A

Exam Voucher + Free Retake

Bundle

Study Guide

Bundle

€69

/ month

incl. 19% VAT · billed monthly

Add the Certification Bundle

€728

one-time

12 hour Video Course

ISO 27001 Toolkit

Practice Exam

Weekly Live Q&A

Exam Voucher + Free Retake

Bundle

Study Guide

Bundle

CERTIFICATION

Prepare for your certification.

Prepare for your certification.

This course prepares you for the TRECCERT ISO/IEC 27001 Lead Implementer exam. Add the Certification Bundle and everything you need to sit the exam is included: the official voucher, a free retake and the official study guide.

This course prepares you for the TRECCERT ISO/IEC 27001 Lead Implementer exam. Add the Certification Bundle and everything you need to sit the exam is included: the official voucher, a free retake and the official study guide.

var(--variable-gKO55sYIs)
TRECCERT Approved Reseller badge

Approved Reseller

Approved Reseller

Recognized by TRECCERT to sell official certification exam vouchers.

Recognized by TRECCERT to sell official certification exam vouchers.

About this course

About this course

If you are leading an ISO 27001 project, you are fighting a battle against the clock. The standard tells you what must be done. The how is left entirely to your imagination.

That leaves you staring at a blank map, forced to build an ISMS from scratch while the deadline moves closer.

This course closes that gap with a complete system. A 12-step roadmap takes you from defining the scope of your ISMS to the certification audit, so you always know the next move. A project plan breaks every step into 400+ tasks with owners and milestones, so progress is visible. Pre-built templates give you the deliverables an auditor expects. And 12 hours of video lessons show you how to build each one, and why the requirement exists, so you can defend it when the auditor asks. All of it ships with the course as the ISO 27001 Toolkit.

The destination is not only a passed audit. Everything you learn feeds directly into the ISO/IEC 27001 Lead Implementer exam. You sit the practice exam when you feel ready, then book the real one. With the Certification Bundle, the voucher is already in your inbox, with a free retake behind you if you need it.


How the course works

The course follows the 12 steps of a real ISO 27001 implementation project, from the scope of your ISMS to the certification audit.

The 12-step roadmap from Step 1 Scope of the ISMS to Step 12 Certification Audit
The 12-step roadmap from Step 1 Scope of the ISMS to Step 12 Certification Audit
The 12-step roadmap from Step 1 Scope of the ISMS to Step 12 Certification Audit

Every step works the same way

Three parts per step, so you always know what comes next.

01 · LEARN

Requirements

What ISO/IEC 27001 requires in this step, and why, so you have an answer when the auditor asks.

02 · WATCH

Case Study

The step carried out at Barvello with the real templates: decisions, documents, approvals.

03 · APPLY

Your Turn

The same step for your organization, with the project plan and templates from the ISO 27001 Toolkit.

CASE STUDY

Meet Barvello Coffee Systems.

A family-owned maker of professional coffee machines from Munich. Its largest customer makes ISO/IEC 27001 a condition for renewing their contract, and ISMS project lead Nadia Berger has less than a year to get there. You follow her through every step.

Case Dossier Included

The company at a glance: history, products, customers, locations and organization. Your starting point for every step of the case study.

What’s included

What’s included

Video training lessons shown on a laptop screen
Video training lessons shown on a laptop screen
COURSE

Video Training

12 hours of video, from the foundations to the certification audit. In every step, you apply what you've learned to your own organization.

ISO 27001 toolkit documents, including policies and a risk register
ISO 27001 toolkit documents, including policies and a risk register
TOOLKIT

ISO 27001 Toolkit

A project plan with more than 400 tasks across all 12 steps, plus templates for policies, procedures, processes and records.

Weekly live Q&A session with Aron Lange
Weekly live Q&A session with Aron Lange
LIVE

Weekly Live Q&A

Every week, bring your questions to a live session with Aron Lange, a practising ISO 27001 Lead Auditor. Get answers from someone who audits management systems for a living.

Sample question from the ISO 27001 practice exam
Sample question from the ISO 27001 practice exam
EXAM

Practice Exam

150 questions in the format of the TRECCERT exam, with an explanation for every answer option, so you know why an answer is right or wrong.

VOUCHER

Exam Voucher with Free Retake

With the Certification Bundle you get the official certification exam voucher plus a free retake: a second chance at no additional cost.

STUDY GUIDE

Official Study Guide

Included in the Certification Bundle: the extensive official TRECCERT study guide covers everything you need to pass the exam.

Inside the ISO 27001 Toolkit

Everything you need to run your implementation project, from the first task to the certification audit. The same files you see in action in the case study, ready to adapt to your organization.

PROJECT PLAN

Always know what comes next.

The 12 steps of the course as a ready-made project plan in Excel. Plan your dates, assign the tasks and track your progress.

ISO 27001 project plan in Excel with Gantt chart

All 12 steps, broken down into more than 400 tasks

Tasks linked to their ISO/IEC 27001 clause or Annex A control

Durations, milestones and a Gantt chart for your timeline

Every deliverable linked to its template

Templates for every deliverable

Four types, colour-coded and numbered like in the plan.

Policies template

POL

Policies

e.g. Information Security Policy, Access Control Policy

Procedures template

SOP

Procedures

e.g. Risk Assessment Procedure, Internal Audit Procedure

Processes template

PRO

Processes

e.g. Risk Assessment Process, Management Review Process

Records template

REC

Records

e.g. ISMS Scope, Statement of Applicability

+

Plus: mind maps of ISO/IEC 27001, 27002, 27005 and the ISO 27000 family, and a control mapping from Annex A to NIST SP 800-53, the NIST CSF and the CIS Controls.

LIVE

Ask a Lead Auditor.
Every Friday.

Ask a Lead Auditor.
Every Friday.

Every week, Aron Lange answers member questions live. Post yours in the community ahead of time or raise it during the session.

Every week, Aron Lange answers member questions live. Post yours in the community ahead of time or raise it during the session.

OCT
16
NEXT SESSION
Friday, 4 PM CEST
Remote · Included in GRCLab+
0
DAYS
05
HRS
31
MIN

Curriculum

Curriculum

Course Introduction

4 lectures

•

16min

Course Resources

2 lectures

•

6min

Chapter 1: Information Security Fundamentals

8 lectures

•

35min

Chapter 2: ISO/IEC 27001:2022

8 lectures

•

51min

Chapter 3: Implementation Project

5 lectures

•

21min

Step 1: Scope of the ISMS

9 lectures

•

44min

Step 2: Gap Analysis

1 lecture

•

4min

Step 3: Management Support

6 lectures

•

34min

Step 4: Information Security Policy

8 lectures

•

27min

Step 5: Competence & Awareness

6 lectures

•

19 min

Step 6: Inventory of Assets

6 lectures

•

22min

Step 7: Risk Management Methodology

12 lectures

•

45min

Step 8: Risk Assessment

5 lectures

•

11min

Step 9: Risk Treatment

9 lectures

•

29min

Step 10: Performance Evaluation

7 lectures

•

29min

Step 11: Improvement

5 lectures

•

21min

Step 12: Certification Audit

3 lectures

•

9min

Annex A: 5. Organizational Controls

37 lectures

•

1hr 18min

Annex A: 6. People Controls

9 lectures

•

45min

Annex A: 7. Physical Controls

15 lectures

•

1hr 16min

Annex A: 8. Technological Controls

34 lectures

•

1hr 13min

Practice Exam

1 lectures

•

3min

Meet your instructor

Meet your instructor

Aron Lange

CISM

CISA

CRISC

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

For years I was the auditee. As a Security Officer, I implemented and ran an ISMS in accordance with ISO 27001, and in every audit I was the one answering for it. You learn quickly what holds up and what falls apart the moment someone asks why.

Then I switched sides. As a Lead Auditor for ISO 27001 and ISO 27701, I now ask the questions. Across dozens of management systems, I kept meeting the same problem I once had myself: trained, certified professionals who could show me the policy but froze when I asked why it exists. I knew that feeling. I had been in their seat.

So I built this course from both sides of the audit table. The 12 steps follow how implementations actually unfold, because I have run one. The lessons dwell on why each requirement exists, because asking why is now my job. More than 30,000 professionals in over 100 countries have trained with me since. The exam tests whether you know the standard. The audit tests whether you understood it. This course prepares you for both.

CAREER

Advisor

Kertos

2024 –

Present

Auditor

TÜV SÜD

2024 –

Present

Security Officer

Deloitte

2022 –

2024

Aron Lange

CISM

CISA

CRISC

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

For years I was the auditee. As a Security Officer, I implemented and ran an ISMS in accordance with ISO 27001, and in every audit I was the one answering for it. You learn quickly what holds up and what falls apart the moment someone asks why.

Then I switched sides. As a Lead Auditor for ISO 27001 and ISO 27701, I now ask the questions. Across dozens of management systems, I kept meeting the same problem I once had myself: trained, certified professionals who could show me the policy but froze when I asked why it exists. I knew that feeling. I had been in their seat.

So I built this course from both sides of the audit table. The 12 steps follow how implementations actually unfold, because I have run one. The lessons dwell on why each requirement exists, because asking why is now my job. More than 30,000 professionals in over 100 countries have trained with me since. The exam tests whether you know the standard. The audit tests whether you understood it. This course prepares you for both.

CAREER

Advisor

Kertos

2024 –

Present

Auditor

TÜV SÜD

2024 –

Present

Security Officer

Deloitte

2022 –

2024

Aron Lange headshot

Lirim Bllaca

COO @ TRECCERT

"We could not be prouder of our partnership with GRCLab. When it comes to delivering top-tier training for our certifications, we’ve found an exceptional match in Aron. Our candidates have greatly benefited from his expertise leading to outstanding success rates on certification exams."

"We could not be prouder of our partnership with GRCLab. When it comes to delivering top-tier training for our certifications, we’ve found an exceptional match in Aron. Our candidates have greatly benefited from his expertise leading to outstanding success rates on certification exams."

Hear it from our partners and students

Hear it from our partners and students

Johannes Hussak

Co-Founder @ Kertos

I was so impressed by this course that we decided to license it for our customers at Kertos. Together with our platform, this course has helped many of our clients in becoming ISO/IEC 27001 certified at record speed.

Jacob Hill

Director of Cybersecurity @ Summit 7

"Aron is very knowledgeable and his content is excellent! His ISO 27001 course helped me prepare for our certification audit!"

Oliver Gehrmann

Business Lead Security & Compliance @ PCG

This course is my top recommendation for GRC onboarding. With clear content, practical examples, and excellent structure, it's the perfect choice for quickly and effectively diving into Governance, Risk & Compliance. Highly recommended!

Nouha Schönbrunn

CEO @ Schönbrunn TASC

We’ve been working with Aron as one of our trusted external trainers, and his courses have become a core part of our onboarding for new junior consultants. Aron’s training approach is clear, down-to-earth, and tailored to help beginners really understand the essentials. He makes complex topics accessible, and I’ve seen firsthand how much confidence his courses give our new hires right from the start. 

Marcel Rieger

Managing Director @ JAMORIE Consulting

I appreciated Aron’s courses, as they illustrate complex concepts in an engaging and practical way! They have greatly supported my learning journey in information security.

Alexander Steinmoeller

Founder and Principal Consultant @ Cybrbolt

This course truly simplifies the complex ISO 27001 standard into practical steps. I've successfully applied Aron's approach in both in my practice and with my clients. Aron's clear, detailed teaching style makes the material easily digestible. I regularly check for updates as it has become my go-to resource.

Johannes Hussak

Co-Founder @ Kertos

I was so impressed by this course that we decided to license it for our customers at Kertos. Together with our platform, this course has helped many of our clients in becoming ISO/IEC 27001 certified at record speed.

Jacob Hill

Director of Cybersecurity @ Summit 7

"Aron is very knowledgeable and his content is excellent! His ISO 27001 course helped me prepare for our certification audit!"

Oliver Gehrmann

Business Lead Security & Compliance @ PCG

This course is my top recommendation for GRC onboarding. With clear content, practical examples, and excellent structure, it's the perfect choice for quickly and effectively diving into Governance, Risk & Compliance. Highly recommended!

FAQ

FAQ

Who is this course for?

What's the difference between this course and the one on Udemy?

Can I use the templates for my organization or for my clients?

Is the course up to date with ISO/IEC 27001:2022?

What happens if I cancel my membership?

Can my employer pay for this? Do I get an invoice?

What does the certification exam look like?

Is the TRECCERT certification recognised?

Do I need work experience to get certified?

How do I book the exam, and what if I fail?

€69

/ month

incl. 19% VAT · billed monthly

Add the Certification Bundle

€728

one-time

12 hour Video Course

ISO 27001 Toolkit

Practice Exam

Weekly Live Q&A

Exam Voucher + Free Retake

Bundle

Study Guide

Bundle