You're not currently signed in. Sign in »

Module 0 - ISMS Foundations

Audience: All employees (mandatory for everyone)

Prerequisite: None - start here before any other module.

This module covers what ISO 27001:2022 is, what an ISMS means in practice at EnableIT, and what your personal responsibilities are as an employee.

All modules

Module	Title	Audience
Module 0 - ISMS Foundations	What ISO 27001 is, what an ISMS is, your responsibilities	All employees
Module 1 - Governance & Leadership	Policies, roles, threat intelligence, legal obligations	All employees + Management
Module 2 - Asset & Information Management	Asset inventory, classification, labelling, IP rights	All employees
Module 3 - Access Control & Identity	Access control, identity management, authentication	All employees
Module 4 - Supplier & Cloud Security	Supplier relationships, cloud services	All employees + Management
Module 5 - Incident Management	Incident response, event reporting, evidence collection	All employees
Module 6 - Business Continuity & Resilience	Disruption, ICT readiness, redundancy	All employees + Management
Module 7 - Privacy, Records & Compliance	Records protection, PII, independent review, training	Management
Module 8 - People Controls	Screening, employment terms, remote working, NDAs	HR + Management
Module 9 - Physical Security	Perimeters, entry, clear desk, equipment, storage media	All employees
Module 10 - Endpoint & Operational Security	Endpoint devices, privileged access, vulnerability management	All employees + Dev/SRE
Module 11 - Data Protection & Monitoring	Logging, monitoring, backups, cryptography, data masking	Dev/SRE
Module 12 - Network Security	Network services, segregation, web filtering	Dev/SRE
Module 13 - Secure Development	Secure SDLC, secure coding, testing, change management	Developers
Module 14 - Documentation & Evidence Responsibility	Control ownership, evidence, audit readiness	Dev/SRE

Click here to start: ISMS Foundations