← Information Security & Cyber Governance
Public CourseAwareness & Introduction
Introduction to Information Security Management Systems
⏱ 1 day🖥 In-person / Virtual✓ HRD Corp Claimable
After this course, you will be able to
📖
Explain the purpose, scope and key requirements of ISO/IEC 27001:2022 Information Security Management Systems
🔍
Identify information security risks, threats and vulnerabilities relevant to your own role and work activities
🎯
Describe the restructured 93-control Annex A across 4 themes including the new 2022 controls
🔧
Recognise and report an information security nonconformity or incident
💬
Describe Malaysian regulatory obligations under PDPA 2010, Bank Negara RMiT and NACSA
✅
Contribute constructively to your organisation's ISMS implementation or maintenance
Overview
Learn the purpose, structure and key requirements of ISO/IEC 27001:2022 — the international standard for Information Security Management Systems. This one-day programme gives every employee the foundational knowledge needed to contribute to their organisation's ISMS, recognise information security risks in daily work, and fulfil their individual obligations under a certified or certification-seeking ISMS.
Learning Objectives
This course will prepare you to:
Understanding
The purpose, structure and key requirements of ISO/IEC 27001:2022 including the CIA triad, the 93 Annex A controls, and the roles and responsibilities within an ISMS.
Recognising
Information security risks, threats and vulnerabilities in everyday work, and understand what conformity, nonconformity and continual improvement mean in practice.
Upcoming Sessions
6
Aug
📅 6 Aug 2026 (1 day)📍 Kuala Lumpur💰 RM 850 per pax
🪑 25 seats left
1-day awareness programme. Covers CIA triad, PDPA 2010, Bank Negara RMiT, NACSA and the 2022 Annex A restructure.
14
Apr
📅 14 Apr 2027 (1 day)📍 Virtual💰 RM 750 per pax
🪑 30 seats left
Second run – virtual delivery. Covers PDPA 2010, Bank Negara RMiT, NACSA and ISO/IEC 27001:2022 2022 Annex A changes.
Your Learning Pathway
You are here
Introduction to Information Security Management Systems
Next step
Move to hands-on asset identification, risk rating and Statement of Applicability production.
Value Proposition
Affordability
We aim to make risk and resilience-type training affordable to everyone.
Accreditation
Foundation class for MIRAR's Certified Information Security System Implementer programme.
Practitioner's Focus
Training conducted with on-the-job perspective in mind, grounded in the Malaysian regulatory context including PDPA 2010, Bank Negara RMiT and NACSA.
Free Membership
Participants will be accepted as Associate Member of MIRAR upon completion.