Aligning training to your ISMS
ISO 27001 includes a control for information security awareness, education and training. We map modules to your policies: acceptable use, classification, clean desk, remote working, access control and incident reporting.
Evidence and records
- Assigned and completed training per person
- Policy acknowledgement tracking
- Phishing simulation results and trends
- Exportable reports for internal audit and certification audits
IT security awareness training for technical staff
Admins and developers need more depth: privileged access, secure configuration, secrets handling and social engineering of the help desk. We add technical tracks alongside general cyber security awareness training.
How Forever Systems runs your training programme
We are vendor-agnostic. We will recommend the platform that suits your size, sector and budget, then run it for you so it actually happens month after month.
- Baseline phishing test to measure where you start
- Platform selection and set-up, with single sign-on and automatic user sync where available
- A year-round schedule of short modules and simulated phishing campaigns
- Reporting for the board, insurers and auditors, showing completion and click-rate trends
- Joined-up defences: email security, MFA and endpoint protection so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations.
Want a baseline phishing test for your team?
Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.
Call 0333 358 3808Send an enquiryFrequently asked questions
What is the difference between information security and cyber security awareness training?
Information security covers all information, including paper and conversations, and ties into formal policies. Cyber security awareness focuses on digital threats. Good programmes cover both.
Does this help with ISO 27001 certification?
It supports the awareness and training requirements and gives you records to show auditors. It does not on its own make you compliant.