After this course you speak the language of information security: you can recognise threats, assess risks and explain which measure helps against what. You also understand the part played by ISO/IEC 27001 and ISO/IEC 27002, and why security depends on organisation as well as technology. The course suits you if you work with confidential data, run a small business or want to prepare for a later role in information security. No IT background is needed.
What you’ll take away.
- Use core terms such as confidentiality, integrity and availability with confidence
- Recognise and assess threats and risks in your own working environment
- Tell organisational, technical and physical measures apart
- Explain the role of laws and standards in information security
Your training in detail
- Who is it for?
- Anyone who handles confidential information at work, plus freelancers and small business owners who need a solid basic understanding.
- Prerequisites
- EXIN lists no formal prerequisites. You do not need any previous knowledge of IT security.
- Format & planning
- Standard length: 2 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Information as an asset: security objectives and key terms
Identifying and assessing threats and risks
Organising security: policies, roles and incidents
Physical, technical and organisational measures
Laws, regulations and the ISO/IEC 27001 and 27002 standards
Exam format and sample questions
You walk through a typical office day, find the security risks in it and match each risk to a suitable measure.
Exams, licences & credentials
This course prepares you for the EXIN Information Security Foundation based on ISO/IEC 27001 exam (ISFS). The exam and its fees are included only if your offer confirms this. The certificate comes from EXIN, not NextNowa. This is not an official EXIN course.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
What is the EXIN exam like?
EXIN specifies 40 multiple-choice questions in one hour, without notes or electronic devices. You need 65 per cent to pass.
Will I learn how to implement an ISMS?
No. This course covers the basics. A follow-on course such as Lead Implementer is a better fit for implementing an ISMS.
Does EXIN Information Security Foundation based on ISO/IEC 27001: the basics include a certificate?
This course prepares you for the EXIN Information Security Foundation based on ISO/IEC 27001 exam (ISFS). The exam and its fees are included only if your offer confirms this. The certificate comes from EXIN, not NextNowa. This is not an official EXIN course.