ISO - IEC Trainings

ISO and IEC standards: the common grammar of international compliance

The International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) publish the standards structuring information security, business continuity, quality and data protection in nearly all large organisations. In Geneva, where ISO has its headquarters, and across French-speaking Switzerland, private banks, international organisations, hospitals, public services, insurers and industrials apply these frameworks as the foundation of their compliance and risk approach. ISO 27001 and ISO 22301 standards have particularly become de facto standards for cybersecurity and operational resilience.

ITTA offers a catalogue dedicated to widely used ISO standards in our client ecosystems: ISO 27001 Lead Implementer and Lead Auditor certification preparation, ISO 27005 (information security risk management), ISO 22301 (business continuity), ISO 9001 (quality management system), ISO 31000 (enterprise risk management), ISO 27701 (privacy extension to ISO 27001), as well as Foundation modules accessible to non-specialist profiles. Our trainers are auditors and consultants active in certification projects at Swiss and international clients.

Following a recognised ISO training opens access to highly valued roles and an official benchmark with recruiters: CISO, compliance officer, internal auditor, cybersecurity consultant, quality officer, business continuity (BCM) officer, DPO. PECB, BSI and other international body certifications are globally recognised and widely expected in Swiss job descriptions, particularly in private banks, international organisations and software vendors targeting an enterprise ISO 27001 certification.

Whether you are CISO, compliance officer, auditor, cybersecurity consultant, quality officer or DPO, our ISO training in Geneva and Lausanne provides the methods and common vocabulary to pass your target certification and structure your compliance approach.

ISO and IEC standards covered by ITTA

ISO 27001: Information Security (ISMS)

ISO 27001 remains the flagship information security standard in companies. It structures the Information Security Management System (ISMS) around Annex A controls, PDCA and internal audit. Our catalogue covers Foundation, Lead Implementer (ISMS implementation) and Lead Auditor (audit conduct). The new ISO 27001:2022 version has redesigned controls around four groups (organisational, human, physical, technological). This standard is particularly expected in private banks, international organisations and software vendors.

ISO 27005: Information Security Risk Management

ISO 27005 complements ISO 27001 with a security risk analysis methodology. Our training covers asset, threat, vulnerability identification, risk evaluation and treatment, and the articulation with EBIOS Risk Manager on the French-Swiss side. This standard is particularly useful for CISOs and auditors.

ISO 22301: Business Continuity (BCM)

ISO 22301 structures business continuity management facing crises (cyberattacks, pandemics, physical incidents). Our catalogue covers Foundation and Lead Implementer for BCM officers, CISOs, crisis and continuity managers. The standard is particularly expected in critical organisations (healthcare, finance, vital infrastructure).

ISO 9001: Quality Management System

ISO 9001 structures the Quality Management System (QMS) with a process approach, continuous improvement and customer orientation. Our catalogue covers Foundation and Lead Auditor for quality officers, internal auditors and quality project managers. ISO 9001 remains the most widely certified standard worldwide.

ISO 31000, ISO 27701 and other standards

ISO 31000 covers enterprise risk management broadly, complementing ISO 27005 on security. ISO 27701 extends ISO 27001 to privacy protection and connects with GDPR. Our catalogue progressively integrates these standards according to demand from Swiss organisations.

The ISO ecosystem and complementary certifications

ISO standards fit into a broader compliance ecosystem. Audit and cybersecurity training covers CompTIA Security+, CISSP and EC-Council CEH certifications, complementary to ISO 27001 on the technical side. The GDPR and nFADP sub-domain covers data compliance, naturally linked to ISO 27701. Process and Lean management training brings Lean IT and Six Sigma, complementary to ISO 9001 on operational quality. The IT service management sub-domain covers ITIL 4, naturally compatible with ISO 20000 (IT service management). Change management APMG training accompanies compliance transformations.

ISO and IEC trends in 2026

Several evolutions are shaping ISO standards application in 2026. ISO 27001:2022 continues its progressive adoption with transition audits to conduct before end of 2025 in organisations historically certified on ISO 27001:2013. AI-related standards (ISO/IEC 42001 on AI management system, ISO/IEC 23894 on AI risk management) gain visibility facing the European AI Act. Supply chain cybersecurity (ISO 28000) gains importance facing ransomware threats and third-party compromises. Business continuity (ISO 22301) remains a structuring topic for critical organisations. Our pedagogical content regularly integrates these evolutions to remain aligned with current company practices.

ISO training in Geneva, Lausanne and online

All our ISO training courses are available on-site in our Geneva and Lausanne centres, as well as in interactive virtual classroom with a live trainer. Our sessions are organised in 5-week cycles. Each session includes practical cases inspired by the daily work of Swiss organisations, particularly rich in private banking, international organisations and public sector. Customised corporate training is also possible at your premises, in Geneva, Lausanne, Vaud and across French-speaking Switzerland, with a programme adapted to your ISO certification scope.

Why choose ITTA for your ISO certification

ITTA offers a training catalogue, in immediate proximity to the ISO headquarters in Geneva. Our ISO trainers are auditors and consultants active in ISO 27001, ISO 22301 and ISO 9001 certification projects at Swiss and international clients. The ISO catalogue regroups our training courses covering widely used standards in French-speaking Switzerland. Our pedagogical team supports you in choosing the right path, preparing the PECB or BSI exams and identifying the funding solutions that fit your professional situation.

Featured courses in this catalogue

Here is a selection of reference training courses in this catalogue, accessible directly:

• ISO/IEC 20000 Foundation
• ISO/IEC 22301 Lead Auditor
• ISO/IEC 22301 Lead Implementer
• ISO 27001 Foundation
• ISO 27001 Lead Auditor
• ISO 27001 Lead Implementer
• ISO/IEC 27005 Risk Manager : 2022
• ISO/IEC 27005 Risk Manager with EBIOS

FAQ

Which ISO standard to choose to start?

It depends on your role. For a security or CISO profile, ISO 27001 Foundation then Lead Implementer or Lead Auditor. For a continuity profile, ISO 22301. For a quality officer, ISO 9001. For a DPO, ISO 27701 complementing GDPR. Our pedagogical team guides you according to your role and project context.

What is the difference between Lead Implementer and Lead Auditor?

Lead Implementer targets the implementation of a management system (ISMS, BCMS, QMS) in an organisation: gap analysis, control deployment, certification project conduct. Lead Auditor targets internal or external audit conduct according to the standard: audit techniques, evidence collection, audit report writing. Many profiles follow both at different career moments.

Is a technical background required before ISO 27001?

No, ISO 27001 is a management standard, not a technical standard. Good ease with the IT ecosystem and risk concepts is sufficient. Non-technical profiles (lawyers, quality officers, HR) can follow Foundation then Lead Implementer without strong technical prerequisites. Technical topics are covered by complementary CompTIA Security+ or CISSP training.

Are your ISO courses available for companies?

Yes, the entire ISO catalogue is available in-house, in Geneva, Lausanne and in virtual classroom, with a programme adapted to your ISO certification scope and industry. Our team builds the specifications with you and organises sessions according to your certification calendar.