ISO Standards Training & Readiness

ISO/IEC 27001 establishes requirements for an Information Security Management System (ISMS).

• Understanding clauses 4–10 and Annex A controls
• Risk assessment and treatment alignment
• Statement of Applicability interpretation
• Internal audit and certification readiness

Training supports both implementation teams and leaders responsible for oversight.

ISO 22301 focuses on maintaining critical services during disruption.

• Business impact analysis and risk assessment
• Continuity strategy design
• Response, recovery and testing requirements
• Integration with operational resilience programmes

Training aligns continuity planning with regulatory and operational expectations.

ISO 9001 supports consistent delivery, customer satisfaction and continual improvement.

• Process definition and performance measurement
• Leadership, planning and operational control
• Nonconformity, corrective action and improvement
• Audit readiness and certification preparation

ISO/IEC 20000-1 provides a formal framework for IT service management.

• Service management system design
• Incident, change and service continuity alignment
• Supplier and service performance management
• Integration with ITIL and governance frameworks

ISO 14001 helps organisations manage environmental responsibilities systematically.

• Environmental aspects and impact identification
• Compliance obligations and monitoring
• Objectives, controls and continual improvement
• Audit and certification readiness

ISO/IEC 42001 addresses governance, risk and control of artificial intelligence.

• AI scope definition and system inventory
• AI risk assessment and control alignment
• Governance, accountability and oversight
• Evidence and audit readiness for AI use

ISO 31000 provides principles and guidance for effective risk management across the organisation. Unlike certifiable management system standards, ISO 31000 focuses on improving decision-making, governance and consistency in how risk is identified, assessed and treated.

• Risk management principles and governance integration
• Risk frameworks, policies and operating models
• Risk identification, analysis and evaluation techniques
• Risk treatment, monitoring and reporting
• Alignment with enterprise risk management and decision-making

Training focuses on applying ISO 31000 pragmatically, supporting leaders, risk owners and practitioners in embedding risk thinking into everyday business activities.

ISO training delivered by Poleis is:

• Standard-aligned — based on official ISO requirements
• Audit-aware — focused on evidence and scrutiny
• Practical — grounded in real organisational contexts
• Proportionate — tailored to size, complexity and risk

This training is suitable for:

• Control owners and implementation teams
• Risk, security and compliance professionals
• Internal auditors and assurance teams
• Managers responsible for certification outcomes