About This Course s-mod-info

What Is ISMS Awareness Training?

ISMS Awareness Training is a one hour online course that helps employees recognize security risks and understand how to keep company information safe. Learners move through the material at their own pace and complete four main topics along the way. The course explains what an Information Security Management System (ISMS) is and why every employee plays a role in it, walks through safe computing practices such as spotting phishing attempts and building strong password habits, covers physical and building security basics like managing visitors and locking down devices, and shows employees how to communicate properly during a security emergency, including who to contact and how to file a report.

Because the course is self-paced, employees can complete it in about an hour, whether in one sitting or across a few short breaks in the workday. Once finished, each learner receives a downloadable certificate that provides a record of their completed training.

This course is one offering within our larger Information Security Training lineup. If you are building out a full compliance training plan for your team, take a look at our HR Compliance Training options as well.

Who Needs ISMS Awareness Training?

This course is meant for employees, contractors, managers, and any other authorized users who work with company systems, internal communications, workplace information, or sensitive data. If your day to day work involves any of these, ISMS Awareness Training gives you the background you need to help protect that information. 

Learning Objectives  

• By the end of this course, learners will be able to:  
• Explain why information security policies are necessary and how they protect the organization  
• Identify the core components of an Information Security Management System (ISMS)  
• Apply safe computing practices to everyday work activities including email, passwords, and device use  
• Describe physical and building security protocols that protect information assets  
• Recognize security events and incidents and report them through the correct channels

Course Outline  

Module 1 — What Is an ISMS?  

Introduction to Information Security Management Systems: what they are, why organizations implement them, and the role every employee plays. Covers policies, procedures, and controls protecting confidentiality, integrity, and availability of information.  

Module 2 — Safe Computing Practices  

Recognizing phishing, ransomware, pretexting, and social engineering attacks. Password hygiene, device security, screen locking, and acceptable use of organizational systems, email, messaging, and data.  

Module 3 — Physical and Building Security  

Access control, visitor management, protecting equipment and physical documents, tailgating risks, and maintaining a secure workspace.  

Module 4 — Communications During an Emergency  

How to recognize a security incident, who to notify, approved reporting channels, escalation paths, and how employees should respond to external or media inquiries.