ISMS Risk Assessment & Statement of Applicability

It is for people who must produce or maintain ISO/IEC 27001 risk records: ISMS leads, risk owners, IT and security managers, and members of implementation teams. It is a hands-on course that applies the ISO/IEC 27005 method rather than teaching it from first principles, so it suits learners who know the basics of information security risk and now need to build the actual registers, Statement of Applicability and treatment plan.

It covers setting scope, risk acceptance criteria and a scoring scale; building an asset register with owners; writing risk scenarios and scoring consequences, likelihood and risk levels in a risk register; choosing treatment options and necessary controls and comparing them with the 93 controls in ISO/IEC 27001:2022 Annex A; preparing the Statement of Applicability with justifications and implementation status; and drafting the risk treatment plan with risk owner approval of residual risk.

It is a set of short video modules, each followed by practice questions, and a final exam. The course page shows the number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISMS Risk Assessment & Statement of Applicability. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Yes. ISMS Risk Assessment & Statement of Applicability is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

ISMS Risk Assessment & Statement of Applicability has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

No. The Certificate of Completion is a training certificate: it shows that one person completed ISMS Risk Assessment & Statement of Applicability and reached the pass mark in its final exam. It is not certification of an organisation, and Sterling does not certify organisations. An organisation is certified to ISO/IEC 27001 by an independent certification body after that body's own audit.