ISO/IEC 27001:2022 Awareness

It is for employees across your organisation, at every level, in organisations that use or are working towards an information security management system. It explains confidentiality, integrity and availability, information assets and risks, and each person's responsibilities at work. No prior knowledge of ISO/IEC 27001 is needed, so it suits new starters as well as experienced staff.

The course is organised in three parts: information and why it matters; the standard, risk and controls; and incidents, review and improvement. Learners learn to explain confidentiality, integrity and availability, recognise information assets and common security risks, understand policies, controls and individual responsibilities, recognise and report incidents, and see how audits and continual improvement support the management system.

ISO/IEC 27001:2022 Awareness is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO/IEC 27001:2022 Awareness. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Yes. ISO/IEC 27001:2022 Awareness is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

ISO/IEC 27001:2022 Awareness is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO/IEC 27001:2022 Awareness and reached the pass mark in its final exam. It is not certification of an organisation to ISO/IEC 27001, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

ISO/IEC 27001:2022 sets the requirements for an information security management system, and its Annex A lists 93 information security controls. ISO/IEC 27002:2022 gives implementation guidance for those controls across four themes: organisational, people, physical and technological. This awareness course introduces the management system; Sterling Academy's ISO/IEC 27002:2022 Information Security Controls course covers the 93 controls in depth.