Discipline

Information Security

Structured learning, implementation support, and insights for information security management systems

Overview

A discipline defines the application area in which management systems are applied, such as information security, quality, or AI.

View all disciplines

Overview

A discipline defines the application area in which management systems are applied, such as information security, quality, or AI.

View all disciplines

This discipline focuses on how organizations protect information assets through structured management systems.

It integrates risk management, control design, governance, and assurance to ensure confidentiality, integrity, and availability in practice.

The content on this page spans structured training modules, integrated learning tracks, advisory services, and insights to support both capability development and operational implementation.

Advisory

Advisory services in information security management

View all services

Advisory

Advisory services in information security management

View all services

Secure data center corridor with server racks, representing enterprise information security and protection of critical information assets.

Advisory in Information Security Management

Soft-focus image of senior professionals in a modern office meeting around a conference table, representing governance, strategic alignment, and organisational decision-making.

Governance & Strategy Advisory

Senior professional working intently on a laptop in a modern office setting, representing structured risk analysis, foresight, and informed decision-making under uncertainty.

Risk & Foresight Advisory

Senior professional working on a laptop in a modern office, reviewing documents at a desk, representing structured operational design, control implementation, and day-to-day execution in organisations.

Control & Operational Design Advisory

Two professionals reviewing a document together in a modern office, representing audit, assurance, and structured evaluation of organisational practices.

Assurance & Audit Advisory

Blurred professionals moving up a staircase in a modern office, symbolizing organisational change, momentum, and continuous improvement.

Change & Improvement Advisory

Small group of professionals gathered around a table, collaboratively reviewing documents and discussing options, representing structured decision-making and analytical evaluation in a business setting.

Decision Analysis Advisory

Halderstone Academy

Professional tracks in information security management & ISO/IEC 27001

Manager and Auditor tracks designed for distinct roles in management systems

View all tracks

Halderstone Academy

Professional tracks in information security management & ISO/IEC 27001

Manager and Auditor tracks designed for distinct roles in management systems

View all tracks

Information security managers reviewing systems in a professional office setting, representing leadership and governance of an information security management system.

Business Continuity Manager Track

This track prepares you to build, operate and continuously improve an Information Security Management System (ISMS) in line with ISO/IEC 27001 and related standards. You develop the skills to manage risk, design controls, align stakeholders and keep the system effective beyond the initial certification project.

Business Continuity Manager Track

Ensuring Data Privacy Compliance

ISO/IEC 27001 auditor reviewing information security controls with an IT colleague in a data centre environment.

Business Continuity Manager Track

A modular training programme that prepares you to conduct internal audits of an Information Security Management System (ISMS) against ISO/IEC 27001. Learn to evaluate controls, risks and processes effectively and support continual improvement of information security.

Business Continuity Manager Track

Ensuring Data Privacy Compliance

Halderstone Academy

Training modules about information security & ISO/IEC 27001

View all modules

Halderstone Academy

Training modules about information security & ISO/IEC 27001

View all modules

Mechanisms of Preventive Security Controls

Core concepts in preventive controls, including access management, cryptography, secure configuration & protective design

Duration

7 h

List price

CHF 750

View module

Mechanisms of Detective & Corrective Security Controls

Core concepts in detective & corrective controls, including logging, monitoring, incident response, backup & recovery

Duration

7 h

List price

CHF 750

View module

ISMS Scope & Statement of Applicability

Define clear ISO/IEC 27001 ISMS scope and boundaries and maintain a defensible Statement of Applicability (SoA)

Duration

7 h

List price

CHF 550

View module

Information Security Risk Management

Systematically assess, treat & document information security risks with traceable decisions in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Operational Control in Information Security

Plan, implement & operate information security controls consistently in day-to-day activities in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Risk Management

Evaluate asset-threat-vulnerability logic, risk treatment decisions, and traceability to controls and the Statement of Applicability

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Controls

Evaluate control applicability, implementation evidence & common failure patterns across ISO/IEC 27001 Annex A control themes

Duration

7 h

List price

CHF 550

View module

Mechanisms of Preventive Security Controls

Core concepts in preventive controls, including access management, cryptography, secure configuration & protective design

Duration

7 h

List price

CHF 750

View module

Mechanisms of Detective & Corrective Security Controls

Core concepts in detective & corrective controls, including logging, monitoring, incident response, backup & recovery

Duration

7 h

List price

CHF 750

View module

ISMS Scope & Statement of Applicability

Define clear ISO/IEC 27001 ISMS scope and boundaries and maintain a defensible Statement of Applicability (SoA)

Duration

7 h

List price

CHF 550

View module

Information Security Risk Management

Systematically assess, treat & document information security risks with traceable decisions in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Operational Control in Information Security

Plan, implement & operate information security controls consistently in day-to-day activities in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Risk Management

Evaluate asset-threat-vulnerability logic, risk treatment decisions, and traceability to controls and the Statement of Applicability

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Controls

Evaluate control applicability, implementation evidence & common failure patterns across ISO/IEC 27001 Annex A control themes

Duration

7 h

List price

CHF 550

View module

Mechanisms of Preventive Security Controls

Core concepts in preventive controls, including access management, cryptography, secure configuration & protective design

Duration

7 h

List price

CHF 750

View module

Mechanisms of Detective & Corrective Security Controls

Core concepts in detective & corrective controls, including logging, monitoring, incident response, backup & recovery

Duration

7 h

List price

CHF 750

View module

ISMS Scope & Statement of Applicability

Define clear ISO/IEC 27001 ISMS scope and boundaries and maintain a defensible Statement of Applicability (SoA)

Duration

7 h

List price

CHF 550

View module

Information Security Risk Management

Systematically assess, treat & document information security risks with traceable decisions in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Operational Control in Information Security

Plan, implement & operate information security controls consistently in day-to-day activities in line with ISO/IEC 27001

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Risk Management

Evaluate asset-threat-vulnerability logic, risk treatment decisions, and traceability to controls and the Statement of Applicability

Duration

7 h

List price

CHF 550

View module

Auditing Information Security Controls

Evaluate control applicability, implementation evidence & common failure patterns across ISO/IEC 27001 Annex A control themes

Duration

7 h

List price

CHF 550

View module

Office scene with people standing, walking and sitting

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.