Information Security Foundation - based on ISO/IEC 27001/27002

The Substantial Business Value of Information Security

The ever-increasing exchange of information taking place between organisations (including their employees, clients, and suppliers) has led to an explosion in the use of computers and other digital devices. We are all familiar with instances of information security breaches that have severely impacted businesses and their customers. Consequently, recent years have seen a sharp increase in the focus on information security.

Throughout the course, we delve into the core elements of information security, including the identification of information assets, risk management, and security controls. We review a range of guidelines and practical measures that you can apply directly in your workplace. The syllabus is consistently aligned with the international standard ISO/IEC 27001 and its accompanying guidance, ISO/IEC 27002. The course is based on the latest 2022 edition of the ISO standards. Following the course, you will have the option to purchase the examination and obtain the associated Information Security Foundation certification.

You will easily be able to relate the course content to your daily operations through practical case studies and real-world examples.

Target Audience

Does your organisation already implement ISO/IEC 27001 and ISO/IEC 27002 Information Security? Or are you preparing to do so? This course is designed for professionals seeking foundational knowledge of information security, with a focus on practical implementation and best practice frameworks, such as ITIL Service Management.

Prerequisites

This is a foundation-level course, and there are no formal prerequisites for participation.

Funding Note: You may be eligible to apply for grant funding via the Financial Competence Pool (Finanskompetencepuljen) for this course if you are employed by a company covered by the collective agreement between FA and Finansforbundet.

Benefits

• Gain fundamental knowledge of information security principles
• Learn how to effectively manage information security within your organisation
• Understand how to identify information assets, assess risks, and implement security controls
• Acquire actionable guidelines and best practices to apply directly to your professional role

Content

• Overview of the ISO/IEC 27000 series elements for information security
• Data and information: The value and importance of information
• Security and reliability: Confidentiality, integrity, and availability of information
• Threats and risks: Risk assessment and risk management
• Approach and governance: Policies, roles, and responsibilities
• Controls and safeguards: Physical, technical, and organisational measures
• Certification (optional)

Course Format

Course Materials

Certification

• Number of questions: 40
• Duration: 1 hour (15 minutes extra time granted if English is not your native language)
• Format: Multiple-choice (in English), closed book
• Pass mark: 65% (26/40 questions)

Upon passing, EXIN will issue your certificate in “EXIN Information Security Foundation based on ISO/IEC 27001”
(27001 is referenced as this is the widely recognised designation for the standard).

Trainer

Sarah Aalborg is an information security specialist with extensive experience in compliance and ISO 27001. She possesses practical expertise across implementation, risk assessments, and internal audits, having assisted numerous organisations in establishing and maturing their information security programmes. As an instructor, she combines substantial industry experience and concrete examples with active participant engagement, translating formal standard requirements into practical, value-adding tools for delegates to apply directly in their daily work.