Develop teams who can operate the controls they are responsible for.
Policies and management systems depend on people who understand their purpose and can apply them consistently. Our programs connect requirements with everyday responsibilities, evidence and improvement.
We help process owners, implementers and assurance teams build the skills needed to support dependable management systems and informed risk decisions.
Who these programs support: management system owners, process managers, risk and compliance teams, information security professionals, business continuity teams and internal auditors.
AY&R Professional Programs
Practical programs to implement, operate and assess management systems, risk and security controls.
ISO/IEC 20000 Service Management System Implementation
Understand how to establish and operate a service management system using ISO/IEC 20000-1 as the reference.
Topics: Scope, service responsibilities, management system arrangements, operational evidence and improvement
Practical output: A draft implementation plan and evidence map
Format: Three days
ISO/IEC 27001 Information Security Management Implementation
Build understanding of an information security management system and the practical work needed to maintain it.
Topics: Scope, information security risk, treatment, control ownership, documented information and review
Practical output: A sample risk treatment exercise and implementation action plan
Format: Three days
ISO 22301 Business Continuity Management
Develop the capability to contribute to your business continuity arrangements. Work through how disruption affects critical activities and the preparations required to respond.
Topics: Business impact, continuity strategies, plans, roles, exercising and improvement
Practical output: A continuity scenario exercise and a draft improvement plan
Format: Two or three days
ISO/IEC 42001 Implementation Workshop
Apply AI management system concepts to an agreed organizational scenario. Participants develop working drafts and identify the decisions needed for a structured implementation.
Topics: Scope, AI responsibilities, risk and impact considerations, operational arrangements and evaluation
Practical output: An initial AI management system implementation roadmap
Format: Three days. Separate from the ISO/IEC 42001 Foundation certification
Risk Management in Practice
Improve how teams describe risks, assess their significance and track agreed treatment. ISO 31000 provides the reference for risk management principles and guidance.
Topics: Context, criteria, identification, analysis, treatment, ownership, escalation and monitoring
Practical output: A sample risk register and management reporting view
Format: Two days
Management System Internal Auditor
Practice planning an audit, conducting interviews, reviewing evidence and communicating clear findings, scoped to a selected management system or an agreed integrated scope.
Topics: Audit objectives, sampling, evidence, findings, reporting and corrective action follow-up
Practical output: An audit plan, interview exercise and sample findings
Format: Two or three days, depending on scope and prior knowledge
Cybersecurity Readiness for Managers and Teams
Build practical awareness of security responsibilities and how business decisions affect exposure. Exercises focus on recognizing concerns and working effectively with security specialists.
Topics: Information handling, access, suppliers, security incidents, continuity and control ownership
Practical output: A role-specific security responsibility checklist and an improvement backlog
Format: One or two days
Tailor the learning to your obligations.
Programs can incorporate your selected regulatory and contractual requirements. We agree the applicable sources, current editions and organizational scope during design, so participants learn how requirements relate to their own responsibilities.
Common Questions
Are these external certification courses?
The programs on this page are AY&R professional programs. If a recognized personnel qualification is required, we confirm a separately identified certification route in the proposal.
Can we combine several management systems?
Yes. The scope should reflect participants’ existing knowledge and the time needed to practice each discipline.
Related programs: IT Service Management · Technology and AI Governance · Customized Programs