ISO/IEC 27001 Course in Military Environments
Online course of 300 h in ISO/IEC 27001 in military environments. 6 modules covering ISO/IEC 27001:2022 (information security management), ISO/IEC 27002:2022 (security controls) and PILAR (CCN). Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Explain the structure of an information security management system.
Carry out risk analysis and treatment.
Select organisational, people, physical and technological controls.
Prepare the statement of applicability.
Relate ISO/IEC 27001 to the Spanish National Security Framework (ENS).
Plan internal audits and system certification.
Manage incidents and the continual improvement of the ISMS.
Who it's for
- Information security manager wanting to specialise in ISO/IEC 27001 in military environments.
- ISO/IEC 27001 auditor wanting to specialise in ISO/IEC 27001 in military environments.
- Risk analyst wanting to specialise in ISO/IEC 27001 in military environments.
- Cybersecurity consultant wanting to specialise in ISO/IEC 27001 in military environments.
- Security incident manager wanting to specialise in ISO/IEC 27001 in military environments.
- ENS compliance manager wanting to specialise in ISO/IEC 27001 in military environments.
- Engineering or science graduates looking to enter the defence industry.
What you'll work with
- ISO/IEC 27001:2022 (information security management)
- ISO/IEC 27002:2022 (security controls)
- Royal Decree 311/2022 (Spanish National Security Framework)
- ISO/IEC 27005 (information security risk management)
- ISO/IEC 27035-1 (incident management)
- ISO/IEC 27007 (management system auditing)
- ISO 22301 (business continuity)
6 modules · 300 h
1.1Purpose and structure of the standard1.2System scope and its delimitation1.3Context, interested parties and leadership1.4Information security policy1.5Roles, responsibilities and resources1.6Relationship with other management standards1.7Environments handling classified information: particularities1.8System accreditation and authorisation to operate1.9Field vocabulary and acronyms1.10Exercise: defining the scope of a system
2.1Risk assessment methodology2.2Asset inventory and ownership2.3Identification of threats and vulnerabilities2.4Assessment of impact and likelihood2.5Risk acceptance criteria2.6Selection of controls and their justification2.7Statement of applicability2.8Risk treatment plan2.9Residual risk and its approval2.10Practice: risk assessment of a process
3.1Policies, procedures and responsibilities3.2Information classification and labelling3.3Personnel clearance and background verification3.4Confidentiality agreements3.5Training and awareness3.6Supplier and supply chain management3.7Asset management and return3.8Teleworking and personal devices3.9Incident management and notification3.10Practice: information classification policy
4.1Perimeters, zones and physical access control4.2Protection of areas holding sensitive information4.3Cabling and equipment security4.4Logical access control and privileges4.5Cryptography and key management4.6Protection against malicious code4.7Logging, monitoring and clock synchronisation4.8Backups and continuity4.9Security in development and change4.10Practice: designing access control for a zone
5.1Mandatory documentation and its control5.2Indicators and measurement of effectiveness5.3Internal audit and its programme5.4Management review5.5Nonconformities and corrective actions5.6Certification process and stages5.7Common findings and how to avoid them5.8Certificate maintenance and version transition5.9Integration with regulatory requirements5.10Practice: preparing a certification audit
6.1Choice of organisation and scope6.2Asset inventory and context analysis6.3Risk assessment and treatment6.4Justified statement of applicability6.5Design of priority controls6.6Documentation of the management system6.7Audit programme and indicators6.8Roadmap to certification6.9System manual6.10Project defence
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is PILAR (CCN), GlobalSUITE, Microsoft Sentinel, advanced Excel, in free, academic or evaluation versions. Tests are studied using real procedures for information asset risk analysis, internal ISMS audits and security incident management exercises. Assessment is continuous by module plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Explain the structure of an information security management system.
Carry out risk analysis and treatment.
Select organisational, people, physical and technological controls.
Prepare the statement of applicability.
Relate ISO/IEC 27001 to the Spanish National Security Framework (ENS).
Where this takes you
Requirements
- No prior degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical regulatory texts.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme is 300 hours in total, spread over 3 to 5 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
You work with PILAR (CCN), GlobalSUITE, Microsoft Sentinel and advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Check the recognition policy when you enrol.
Related programmes
ISO Course in Air Conditioning for Military Bases
Online 300 h Course in ISO in air conditioning for military bases. 6 modules covering RITE (Real Decreto 1027/2007), EN 16798-1 (indoor environment parameters) and EnergyPlus.…
Course in Ethics and Governance in Biological Intelligence
Online 300 h course in ethics and governance in biological intelligence. 6 modules with the Biological Weapons Convention (1972), International Health Regulations (2005) and NVivo. Assigned…
Course in Ethics and Transparency in Military Vehicle Contracts
Online 300 h course in ethics and transparency in military vehicle contracts. 6 modules covering Directive 2009/81/EC (defence and security procurement), Law 24/2011 on public sector…
More in Defense, Military Engineering & Land Systems
All Defense, Military Engineering & Land Systems programmes → · How to apply · Fees & financing · Scholarships