The new version of ISO/IEC 27001 has been recently published and is now aligned with the new version of ISO/IEC 27002, which was published in February, 2022. The major changes between ISO/IEC 27001:2022 and ISO/IEC 27001:2013 are noticed in the information security controls of Annex A, whereas a few other minor changes are present in the clauses of the standard too. Furthermore, the title of ISO/IEC 27001:2022 differs from the title of ISO/IEC 27001:2013, as now the standard is titled Information security, cybersecurity and privacy protection — Information security management systems — Requirements. 

In line with this, Sentinel Africa Consulting wishes to invite you to to take up the ISO/IEC 27001:2022 Transition training so as to gain an understanding on the requirements of the new standard and how to effectively adopt and implement them in your organization. 

Sentinel Africa is an ISO 27001 certified firm offering training and consultancy services. Our trainings are certified by PECB (Professional Evaluation and Certification Board) and CertiTrust. Our trainers and consultants have requisite industry experience and certification to ensure that we exceed the expectations of our esteemed clients.

About the Course 

The ISO/IEC 27001:2022 Transition training course is designed to provide detailed information on the revised clauses, the new terminology, and the differences in the controls of Annex A.  

Additionally, this training course will provide participants with the necessary knowledge to support organizations in planning and implementing the changes in their ISMS to ensure conformity with ISO/IEC 27001:2022. As such, the participants will be able to participate in projects to transition from an ISMS based on ISO/IEC 27001:2013 to an ISMS based on ISO/IEC 27001:2022 in various environments.

3. Lesson Plan 

Day 1| Introduction to ISO/IEC 27001:2022 and comparison to ISO/IEC 27001:2013 

• Training course objectives and structure 
• Standards and regulatory frameworks 
• Overview of the changes between ISO/IEC 27001:2013 and ISO/IEC 27001:2022 
• Changes in clauses 4 to 10 of ISO/IEC 27001 

Day 2 | Comparison between Annex A controls of ISO/IEC 27001:2013 and ISO/IEC 27001:2022 

• Annex A — Organizational controls 
• Annex A — People controls. 
• Annex A — Physical controls 
• Annex A — Technological controls 
• Closing of the training course. 

Day 3 | Certification Exam  

• ISO/IEC 27001: 2022 Transition Exam