ISO/IEC 27001:2022 with Safeguard: Building and Running the Information Security Management System (ISMS)

IntermediateFree5 modules · 13 lessons · ~2 min

About this course

ISO 27001:2022 certifies a management system, not a set of settings: the standard asks you to know your context, assess and treat risk, decide which of the 93 Annex A controls apply, and prove the system runs through internal audit, management review and corrective action. This course builds that ISMS clause by clause, shows how each Annex A theme is evidenced from Safeguard's Frameworks, Controls, Evidence, Risks, Vendors, Monitoring and Tests tabs and from scanner and connector output, and prepares you for Stage 1, Stage 2 and surveillance audits while reusing SOC 2 evidence wherever it fits.

What you'll learn

The ISMS and the Structure of ISO 27001:2022

What an ISMS Is and How ISO 27001:2022 Is Built
Scope, Interested Parties, Leadership and Documented Information

Risk Assessment, Risk Treatment and the Statement of Applicability

Risk Assessment Methodology: Criteria, Assets, Likelihood and Impact
Risk Treatment and the Risk Treatment Plan
The Statement of Applicability

Organisational, People and Physical Controls with Safeguard Evidence

Policies, Roles, Assets and Classification (A.5.1 to A.5.14)
Access Control and Supplier Relationships (A.5.15 to A.5.23)
Incidents, Continuity, Compliance, People and Physical Exclusions (A.5.24 to A.6.8, A.7)

01The ISMS and the Structure of ISO 27001:20222 lessons

What an ISMS Is and How ISO 27001:2022 Is Built
Scope, Interested Parties, Leadership and Documented Information

02Risk Assessment, Risk Treatment and the Statement of Applicability3 lessons

Risk Assessment Methodology: Criteria, Assets, Likelihood and Impact

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

Technological Controls Evidenced from Scanner and Connector Output

Vulnerability Management, Source Code Access and Configuration (A.8.8, A.8.4, A.8.9, A.8.1 to A.8.3)
Logging, Monitoring, Cryptography, Backup and Networks (A.8.13 to A.8.24)
Secure Development and Change Management (A.8.25 to A.8.34)

Running the ISMS: Audit, Review, Improvement and Certification

Performance Evaluation and Improvement: Monitoring, Internal Audit, Management Review and Corrective Action
Stage 1, Stage 2, Surveillance and Reusing SOC 2 Evidence

Risk Treatment and the Risk Treatment Plan

The Statement of Applicability

03Organisational, People and Physical Controls with Safeguard Evidence3 lessons

Policies, Roles, Assets and Classification (A.5.1 to A.5.14)
Access Control and Supplier Relationships (A.5.15 to A.5.23)
Incidents, Continuity, Compliance, People and Physical Exclusions (A.5.24 to A.6.8, A.7)

04Technological Controls Evidenced from Scanner and Connector Output3 lessons

Vulnerability Management, Source Code Access and Configuration (A.8.8, A.8.4, A.8.9, A.8.1 to A.8.3)
Logging, Monitoring, Cryptography, Backup and Networks (A.8.13 to A.8.24)
Secure Development and Change Management (A.8.25 to A.8.34)

05Running the ISMS: Audit, Review, Improvement and Certification2 lessons

Performance Evaluation and Improvement: Monitoring, Internal Audit, Management Review and Corrective Action
Stage 1, Stage 2, Surveillance and Reusing SOC 2 Evidence2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.