ISO Standards Training in Sao Paulo

ISO/IEC 27035 Lead Incident Manager is the application of the ISO/IEC 27035 standard for planning, managing, and improving an organization’s information security incident management process.

This instructor-led, live training (online or onsite) is aimed at experienced security professionals who wish to lead and manage an incident response team in accordance with ISO/IEC 27035 best practices.

By the end of this training, participants will be able to:

• Understand the structure, principles, and requirements of ISO/IEC 27035.
• Develop and implement an information security incident management plan.
• Lead an incident response team through detection, analysis, containment, and recovery.
• Integrate incident management into an organization’s ISMS for continual improvement.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

ISO 37001:2025 is an international standard for Anti-Bribery Management Systems (ABMS) that provides requirements and guidance for preventing, detecting, and addressing bribery risks across organizations of any size or sector.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level professionals who wish to understand and support the implementation or auditing of an anti-bribery management system based on ISO 37001:2025.

By the end of this training, participants will be able to:

• Understand the structure and intent of ISO 37001:2025.
• Apply anti-bribery requirements in real-world organizational contexts.
• Develop and monitor effective internal controls and reporting systems.
• Support an organization’s efforts toward regulatory compliance and ethical integrity.

Format of the Course

• Interactive lecture and discussion.
• Real-world case studies and examples.
• Scenario-based exercises and group work.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

ISO 37301 is an international standard that specifies the requirements for establishing, developing, implementing, evaluating, maintaining, and improving an effective compliance management system (CMS).

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level professionals who wish to understand, implement, or audit a compliance management system based on ISO 37301.

By the end of this training, participants will be able to:

• Understand the structure, purpose, and scope of ISO 37301.
• Implement the key elements of a compliance management system (CMS).
• Identify compliance risks and opportunities across the organization.
• Integrate ISO 37301 CMS with existing governance, risk, or ISO systems.

Format of the Course

• Interactive lecture and discussion.
• Hands-on exercises and real-world case studies.
• Group activities and compliance scenario simulations.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level quality management professionals who wish to learn the concepts, scope, and application of SOTIF for designing, implementing, and verifying the safety of the intended functionality in advanced driver assistance systems (ADAS) and autonomous driving features.

By the end of this training, participants will be able to:

• Recognize potential functional insufficiencies and misuse scenarios.
• Conduct hazard analysis and classify them based on SOTIF principles.
• Integrate SOTIF requirements into the system design, development, and validation phases.
• Implement validation methods to handle edge cases and unforeseeable risks.
• Ensure continuous monitoring and post-deployment improvements to maintain safety.
• Identify and overcome challenges specific to new technologies and SOTIF processes.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level to advanced-level risk management professionals who wish to enhance their risk management skills in alignment with ISO 31000.

By the end of this training, participants will be able to:

• Understand the principles and concepts outlined in ISO 31000.
• Implement effective risk management processes in compliance with ISO 31000.
• Identify and assess risks systematically.
• Apply risk treatment strategies and monitoring techniques.
• Communicate and report risks transparently within the organization.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level to advanced-level cybersecurity professionals who wish to become proficient Lead CyberSecurity Managers in accordance with the ISO/IEC 27032 standard.

By the end of this training, participants will be able to:

• Gain insights into the principles and practices outlined in ISO 27032.
• Lead cybersecurity initiatives in compliance with ISO/IEC 27032.
• Effectively manage cybersecurity in cyberspace.
• Foster a secure cyberspace environment for organizations.

Objectives

• Gaining knowledge about ISO 45001, 2018 edition
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Gaining knowledge about changes to ISO 27001 2023 edition
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Learning about ISO 14001, 2015 edition
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level quality and measurement professionals who wish to implement, audit, or improve a measurement management system based on ISO 10012:2003 to support quality assurance and regulatory compliance.

By the end of this training, participants will be able to:

• Understand the structure, scope, and intent of ISO 10012:2003.
• Implement a measurement management system that ensures equipment reliability and measurement traceability.
• Define roles, responsibilities, and documentation required for measurement control.
• Integrate ISO 10012 with broader quality and risk management frameworks (e.g., ISO 9001, ISO/IEC 17025).

Objectives

• Gaining knowledge of ISO 27001:2023
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Gaining knowledge about ISO 19011, 2018 edition
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Learning about ISO 9001 2015 edition
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Gaining knowledge of ISO 9001:2015
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

Objectives

• Gaining knowledge of ISO 45001:2018
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

ISO 9001 and ISO 27001 are internationally recognized standards for quality and information security management systems, respectively.

This instructor-led, live training (online or onsite) is aimed at intermediate-level professionals who wish to interpret ISO 9001 and ISO 27001 standards and perform internal audits effectively.

By the end of this training, participants will be able to:

• Understand the principles and requirements of ISO 9001 and ISO 27001.
• Interpret the clauses and controls in real-world contexts.
• Plan and conduct internal audits aligned with ISO standards.
• Identify nonconformities and recommend corrective actions.

Format of the Course

• Interactive lecture and discussion.
• Simulated auditing exercises and case studies.
• Hands-on analysis of quality and security scenarios.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Objectives

• Gaining knowledge of ISO 27001:2023
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement ISO 27017 controls to enhance cloud security and compliance.

By the end of this training, participants will be able to:

• Understand the principles and objectives of ISO 27017.
• Identify key security controls specific to cloud environments.
• Implement ISO 27017 controls within cloud service providers and cloud customers.
• Align cloud security strategies with ISO 27001 requirements.
• Ensure compliance with international cloud security best practices.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at beginner-level professionals who wish to gain an understanding of ISO 27001 and its role in enhancing information security within an organization.

By the end of this training, participants will be able to:

• Understand the purpose and benefits of an ISMS.
• Familiarize themselves with key ISO 27001 concepts, terms, and principles.
• Recognize the role of an auditor in ensuring compliance.
• Gain insight into the audit process and continual improvement within ISO 27001.

Objectives

• Gain knowledge of ISO 14001:2015
• Gaining knowledge on how to audit in accordance with the standard
• Getting to know good practices

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level to advanced-level professionals in the food industry who wish to understand, implement, and achieve ISO 22000 certification.

By the end of this training, participants will be able to:

• Understand the principles and requirements of ISO 22000.
• Implement a Food Safety Management System (FSMS).
• Identify and manage food safety hazards using HACCP principles.
• Prepare for ISO 22000 certification audits.
• Ensure compliance with international food safety regulations.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate to expert-level IT professionals who wish to enhance their skills and qualifications in information security or related fields.

By the end of this training, participants will be able to:

• Understand the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022.
• Gain the knowledge and skills to plan and implement the transition from the 2013 to the 2022 version of the standard efficiently.
• Apply the knowledge in real-world scenarios, facilitating a smooth transition in their respective organizations.

ISO/IEC 27002 Lead Manager training enables you to develop the necessary expertise and knowledge to support an organization in implementing and managing Information Security controls as specified in ISO/IEC 27002. 

After completing this course, you can sit for the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” credential.  A PECB Lead Manager Certification, proves that you have mastered the principles and techniques for the implementation and management of Information Security Controls based on ISO/IEC 27002.

Who should attend?

• Managers or consultants seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
• Project managers or consultants seeking to master the Information Security Management System implementation process
• Individuals responsible for the information security, compliance, risk, and governance, in an organization
• Members of information security teams
• Expert advisors in information technology
• Information Security officers
• Privacy officers
• IT professionals
• CTOs, CIOs and CISOs

Learning objectives

• Master the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
• Gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques required for the effective implementation and management of Information Security controls
• Comprehend the relationship between the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
• Understand the importance of information security for the strategy of the organization
• Master the implementation of information security management processes
• Master the formulation and implementation of security requirements and objectives

Educational approach

• This training is based on both theory and practice
• Sessions of lectures illustrated with examples based on real cases
• Practical exercises based on case studies
• Review exercises to assist the exam preparation
• Practice test similar to the certification exam

General Information

• Certification fees are included on the exam price
• Training material containing over 500 pages of information and practical examples will be distributed to the participants
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued to the participants
• In case of exam failure, you can retake the exam within 12 months for free

After attending the training course, you can sit the exam and, if you successfully pass the exam, you can apply for the “Certified ISO 22301 Lead Implementer” credential. The internationally recognized “Certified ISO 22301 Lead Implementer” certificate will prove that you have the professional capabilities and practical knowledge to implement a BCMS based on the requirements of ISO 22301 in an organization.

Who should attend?

• Project managers and consultants involved in business continuity 
• Expert advisors seeking to master the implementation of the business continuity management system
• Individuals responsible to maintain conformity with BCMS requirements within an organization
• Members of the BCMS team

Learning objectives

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of a BCMS
• Learn how to interpret and implement the requirements of ISO 22301 in the specific context of an organization
• Understand the operation of the business continuity management system and its processes based on ISO 22301
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and continually improving a BCMS

Educational approach

• This training course is based on theory, implementation best practices, and ISO 22301 requirements useful for the implementation of a BCMS.
• Lecture sessions are illustrated with practical exercises based on a case study which includes role-playing and discussions.
• The participants are encouraged to intercommunicate and engage in discussions and exercises.
• The exercises are similar to the certification exam.

General Information

• Certification fees are included in the exam price. After completion of the course you will be able to book the exam.
• Participants will be provided with the training material containing over 450 pages of explanatory information and practical examples.
• An Attendance Record worth 31 CPD (Continuing Professional Development) credits will be issued to participants who have attended the training course.
• In case candidates fail the exam, they can retake the exam within 12 months following the initial exam for free. 

ISO 26262 defines the requirements for functional safety in the automotive sector.

This instructor-led, live training (online or onsite) is aimed at automotive professionals who wish to implement the ISO 26262 standard within their organization.

By the end of this training, participants will be able to:

• Understand functional safety as it relates to automotive hardware and software development.
• Understand the legal responsibilities and compliance requirements of ISO 26262.
• Implement the safety processes prescribed in ISO 26262.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at automotive professionals who wish to implement the ISO 26262 standard within their organization.

By the end of this training, participants will be able to:

• Establish complete and consistent software safety requirements.
• Analyze software architectures for safety, including freedom from independence (FFI) analysis.
• Build processes that use documentation tools to improve software quality.
• Plan and execute an integration test strategy for software and systems.
• Implement and test software units for safety applications.

Why should you attend?

ISO/IEC 27001 Foundation training allows you to learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001. During this training course, you will be able to understand the different modules of ISMS, including ISMS policy, procedures, performance measurements, management commitment, internal audit, management review and continual improvement.

After completing this course, you can sit for the exam and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. A PECB Foundation Certificate shows that you have understood the fundamental methodologies, requirements, framework and management approach.

Who should attend?

• Individuals involved in Information Security Management 
• Individuals seeking to gain knowledge about the main processes of Information Security Management Systems (ISMS)
• Individuals interested to pursue a career in Information Security Management

Educational approach

• Lecture sessions are illustrated with practical questions and examples
• Practical exercises include examples and discussions
• Practice tests are similar to the Certification Exam

ISO/IEC 27005 Lead Risk Manager training enables you to acquire the necessary expertise to support an organization in the risk management process related to all assets of relevance for Information Security using the ISO/IEC 27005 standard as a reference framework. During this training course, you will gain a comprehensive knowledge of a process model for designing and developing an Information Security Risk Management program. The training will also contain a thorough understanding of best practices of risk assessment methods such as OCTAVE, EBIOS, MEHARI and harmonized TRA. This training course supports the implementation process of the ISMS framework presented in the ISO/IEC 27001 standard.

After mastering all the necessary concepts of Information Security Risk Management based on ISO/IEC 27005, you can sit for the exam and apply for a “PECB Certified ISO/IEC 27005 Lead Risk Manager” credential. By holding a PECB Lead Risk Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Information Security Risks.

Who should attend?

• Information Security risk managers
• Information Security team members
• Individuals responsible for Information Security, compliance, and risk within an organization
• Individuals implementing ISO/IEC 27001, seeking to comply with ISO/IEC 27001 or individuals who are involved in a risk management program
• IT consultants
• IT professionals
• Information Security officers
• Privacy officers

Examination - Duration: 3 hours

The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:

• Domain 1 Fundamental principles and concepts of Information Security Risk Management
• Domain 2 Implementation of an Information Security Risk Management program
• Domain 3 Information security risk assessment
• Domain 4 Information security risk treatment
• Domain 5 Information security risk communication, monitoring and improvement
• Domain 6 Information security risk assessment methodologies

General Information

• Certification fees are included on the exam price
• Training material containing over 350 pages of information and practical examples will be distributed
• A participation certificate of 21 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months for free

Information security threats and attacks increase and improve constantly. The best form of defense against them is the proper implementation and management of information security controls and best practices. Information security is also a key expectation and requirement of customers, legislators, and other interested parties.

This training course is designed to prepare participants in implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.

After attending the training course, you can take the exam. If you successfully pass it, you can apply for a “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement an ISMS based on the requirements of ISO/IEC 27001.

Who Can Attend?

• Project managers and consultants involved in and concerned with the implementation of an ISMS 
• Expert advisors seeking to master the implementation of an ISMS
• Individuals responsible for ensuring conformity to information security requirements within an organization
• Members of an ISMS implementation team

General information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge

Educational approach

• This training course contains essay-type exercises, multiple-choice quizzes, examples, and best practices used in the implementation of an ISMS.
• The participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises. 
• The exercises are based on a case study. 
• The structure of the quizzes is similar to that of the certification exam.

Learning objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the operation of an information security management system and its processes based on ISO/IEC 27001
• Learn how to interpret and implement the requirements of ISO/IEC 27001 in the specific context of an organization
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

ISO 28000 Lead Implementer training enables you to develop the necessary expertise to support an organization in establishing, implementing, managing and maintaining a Supply Chain Security Management System (SCSMS) based on ISO 28000. During this training course, you will also gain a thorough understanding of the best practices of Supply Chain Security Management Systems and be able to improve efficiency in managing potential security risks and their impacts in an organization`s supply chain. 

After mastering all the necessary concepts of Supply Chain Security Management Systems, you can sit for the exam and apply for a “PECB Certified ISO 28000 Lead Implementer” credential. By holding a PECB Lead Implementer Certificate, you will demonstrate that you have the practical knowledge and professional capabilities to implement ISO 28000 in an organization.

 Who should attend?

• Managers or consultants involved in Supply Chain Security Management
• Expert advisors seeking to master the implementation of a Supply Chain Security Management System
• Individuals responsible for maintaining conformance with SCSMS requirements
• SCSMS team members

Learning objectives

• Acknowledge the correlation between ISO 28000 and other standards and regulatory frameworks
• Master the concepts, approaches, methods and techniques used for the implementation and effective management of a SCSMS
• Learn how to interpret the ISO 28000 requirements in the specific context of an organization
• Learn how to support an organization to effectively plan, implement, manage, monitor and maintain a SCSMS
• Acquire the expertise to advise an organization in implementing Supply Chain Security Management System best practices

Educational approach

• This training is based on both theory and best practices used in the implementation of a SCSMS
• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

General Information

• Certification fees are included on the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months for free

The ISO/IEC 42001 Foundation training course equips you with the core principles necessary for establishing and managing an artificial intelligence management system (AIMS) in accordance with ISO/IEC 42001. The course is structured to provide you with essential understanding, setting a solid foundation for further expertise in AIMS. 

ISO/IEC 42001 Lead Auditor training course enables you to gain the necessary expertise to audit artificial intelligence management systems (AIMS) by applying widely recognized audit principles, procedures, and techniques. 

ISO 9001 Foundation training enables you to learn the basic elements to implement and manage a Quality Management System (QMS) as specified in ISO 9001. During this training course, you will be able to understand the different modules of a QMS, including QMS policy, procedures, performance measurements, management commitment, internal audit, management review and continual improvement.

After completing this course, you can sit for the exam and apply for a “PECB Certified ISO 9001 Foundation” credential. A PECB Foundation Certificate shows that you have understood the fundamental methodologies, requirements, framework and management approach.

Who should attend?

• Individuals involved in Quality Management
• Individuals seeking to gain knowledge about the main processes of Quality Management Systems (QMS)
• Individuals interested to pursue a career in Quality Management

The “PECB Certified ISO 9001 Foundation” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains: h Domain 1: Fundamental principles and concepts of a Quality Management System (QMS) h Domain 2: Quality Management System (QMS)

Upon the successful completion of the exam, you can apply for the “PECB Certified ISO 9001 Foundation” credential.

General Information

Certification fees are included on the exam price

Training material containing over 200 pages of information and practical examples will be distributed

A participation certificate of 14 CPD (Continuing Professional Development) credits will be issued

In case of exam failure, you can retake the exam within 12 months for free

The ISO 9001 Lead Auditor training enables you to develop the necessary expertise to perform a Quality Management System (QMS) audit by applying widely recognized audit principles, procedures and techniques. During this training course, you will acquire the knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and the certification process according to ISO/IEC 17021-1.

Based on practical exercises, you will be able to master the audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution.  

After acquiring the necessary expertise to perform this audit, you can sit for the exam and apply for a “PECB Certified ISO 9001 Lead Auditor” credential. By holding a PECB Lead Auditor Certificate, you will demonstrate that you have the capabilities and competencies to audit organizations based on best practices. 

Who should attend?

• Auditors seeking to perform and lead Quality Management System (QMS) certification audits
• Managers or consultants seeking to master a Quality Management System audit process
• Individuals responsible for maintaining conformance with QMS requirements
• Technical experts seeking to prepare for a Quality Management System audit
• Expert advisors in Quality Management

General information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge

Training course is focused on the information security risk management process introduced by ISO/IEC 27005 and the structure of the standard.

The course provides an overview of the guidelines of ISO/IEC 27005 for managing information security risks, including context establishment, risk assessment, risk treatment, communication and consultation, recording and reporting, and monitoring and review.

After attending the training course, you can enroll for the Foundation Exam and, if you successfully pass it, you can apply for a “PECB Certificate Holder in ISO/IEC 27005 Foundation” certificate.

Foundation Exam ( extra cost): Duration: 1 hour, Questions: 40, Where: Online

A PECB Foundation certificate shows that you have knowledge on the fundamental concepts, principles, methodologies, processes, and management approaches used in information security risk management.

After successfully completing the training course, you will be able to:

• Explain the fundamental concepts and principles of an AIMS based on ISO/IEC 42001
• Interpret the ISO/IEC 42001 requirements for an AIMS from the perspective of an implementer
• Initiate and plan the implementation of an AIMS based on ISO/IEC 42001 by utilizing PECB’s IMS2 Methodology and other best practices
• Support an organization in operating, maintaining, and continually improving an AIMS based on ISO/IEC 42001
• Prepare an organization to undergo a third party certification audit

The ISO/IEC 27001 Transition training course enables participants to thoroughly understand the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022. In addition, participants will acquire knowledge on the new concepts presented by ISO/IEC 27001:2022. 

In this instructor-led, live training in Sao Paulo, participants will learn about the QMS Audit principles, procedures and documentations as they step through a series of case studies, group discussions, and hands-on exercises and activities. 

By the end of this training, participants will be able to:

• Identify the Requirements for a successful QMS Audit.
• Create an Audit Checklist for a sample audit scenario.
• Report findings in accordance to ISO 9001 requirements.
• Write and grade non-conformity reports and evaluate proposals for corrective action.
• Prepare and present a convincing evaluation to top management in accordance to the organization's policy and objectives.