ISO 27001 Training | Passing the ISMS Surveillance Audit

Blend Interactive Content

ISO/IEC 27001:2022 sets the requirements for an information security management system, kept alive by recurring surveillance audits. This interactive course provides practical, scenario-based training to help security teams understand their responsibilities and confidently manage compliance.

Rather than learning through slides alone, you'll take part in a realistic scenario where your decisions influence the outcome. Working through one surveillance audit of a half-built system you inherited without a handover, you'll classify inherited controls, tell documented apart from operating, manage major-versus-minor nonconformity closure windows, and steer the audit toward a clean outcome.

During this course, you'll learn how to:

• Separate documented controls from those actually operating
• Classify inherited controls in a half-built management system
• Manage major and minor nonconformity closure windows
• Carry an inherited system through a full surveillance cycle
• Prepare and organise evidence for the auditor
• Steer the audit toward a clean certification outcome

Course features:

• Immersive, decision-based learning with multiple possible outcomes
• Realistic case files, supporting documents and practical activities
• Voiced narration and realistic audit case files
• Interactive audit-readiness exercises
• Approximately 2 hours of self-paced online learning
• Developed by Blend Training and reviewed by qualified cybersecurity and compliance professionals

Licensing

This course is available as an annual organisational licence priced by headcount.

• Starter (up to 50 employees): £690 per year
• Growth (up to 250 employees): £1,490 per year
• Scale (up to 1,000 employees): £3,990 per year

Larger organisations and bespoke programmes are available on request. Training can be delivered through your own LMS via SCORM 1.2, SCORM 2004 or xAPI, or hosted by Blend Training with completion and score tracking.

CISOs, IT managers, risk and compliance officers, operations leads, and senior managers in organisations covered by cyber resilience regulation.

No prior knowledge needed. The course runs online and works on any device: desktop, laptop, tablet or phone.

Supports professionals taking on compliance, risk or governance responsibility in this area, and managers preparing for senior roles where this regulation sits on their desk.