Is Training Needed For ISMS Implementation and Certification?

Haven taking part of development of international standard for almost a decade or more, I think that the toolbox presented by ISO when it comes to information security and other management systems is stronger than ever. But, however this is something which is continuously evolving, which means that for any individual or organization to make sure that they have the resources they need, with the competence they need.

They need to continuously monitor on what is happening, but also to make sure that their experts internal or external have the knowledge they seek. And one way, for making sure that they get this is to make sure that the person they take on board as consultant or as internal staff have the relevant certification. Also for, let’s say internal staff to be on top of the situation, to continuously evolve with the standard is important for them to make sure that they take part of the training at hand. I would say that PECB courses are very..very well aligned with what is happening with ISO for example. I also appreciate the fact as a trainer, as a certified trainer that the courses are rather about the “how” than the “what”, so to speak. If you attend the PECB course let’s say Lead Auditor course, you get the toolkit you need to go out there and to successfully lead or run audits by yourself. And as for the Lead Implementer courses for example, what I know is widely appreciated by our customers, my customers and organizations.

This is the fact the people get the whole picture, they are able to run the project to set successfully and they know what pitfalls there are, and they also have the opportunity in the classes to discuss with other people in the same position about what to look for and what to avoid, so to speak. So, I think that the whole setup of PECB courses is way of addressing, both individuals, but also the organization for success when it comes both for the implementation and the maintenance of an ISMS. And definitely for organization going for certification, this is something to recommend, because it means that when they are starting out, or later on the process, they know that they have their people on board who can engage with the certification body, in a discussion on the relevant topics.