Learn It.
Bring your basic understanding of GRC, from coursework, training from any provider, or independent study. If ISO/IEC 27001 is new to you, allow additional time to learn its concepts as you build.
27001 Foundation Portfolio
Build your first practical portfolio pieces, and explain them with confidence.
For recent graduates, career changers, and professionals starting out in information security and GRC, including aspiring GRC analysts, who want to help organizations protect their information with an information security management system (ISMS). You need a basic understanding of governance, risk management, and compliance (GRC); previous work experience and certifications are optional.
Build five simulated portfolio pieces for a fictional company, with written feedback from Dr. Rose Shumba on every step.
Learn it. Build and defend it. Use it professionally.
USD $287
Enroll in the Portfolio
27001 Foundation PortfolioYou've learned the basics. Now you want to use them.
You may have studied GRC through coursework, training, or independent study. You've learned why information matters to a business, why risk matters, and what an organization does to protect its information. Now you want to see how that knowledge turns into real work.
How do I show an employer what I learned?
What would you show when someone asks what you can do?
An interviewer asks, "Tell me about a risk you identified and how you rated it."
A manager asks you to help set the scope of the company's security program. Where would you start?
You know the terms. A piece of work you've completed yourself gives you something concrete to discuss: what you did, the decision you made, and why.
Build the work. Practice explaining your decisions.
Training gives you the language of information security and ISO/IEC 27001. Applying it to a realistic case shows you how the pieces fit together.
What should the ISMS cover first? Which information matters most to the business? Which risk needs attention first?
In this program, you answer questions like these as you build. You document your reasoning, receive feedback, and practice explaining your work.
Help TechFlow start its ISMS, one piece at a time.
Your assignment is to help TechFlow Solutions, a fictional company, take the first steps toward its information security management system.
In four guided steps, you write an executive security summary, a program charter, a scope and asset profile, and a risk register. In the fifth step, you connect that work to a second framework: you map it to the NIST Cybersecurity Framework (CSF) 2.0 and assess TechFlow against one selected outcome.
Each step gives you a task, a section of the portfolio template and a worked example. For each step, you submit two things:
- The written piece, with a short written rationale for your key decision.
- A short video, recorded using your phone or computer, answering one interview question about that piece.
You finish by selecting your best three pieces and sharing them through one portfolio link. Each piece is clearly labeled as simulated work, ready for interviews.
Learn it. Build and defend it. Use it professionally.
Build and Defend It.
Apply your knowledge to TechFlow. Complete each guided task, write the rationale for your decisions, and submit your work for written feedback from Dr. Rose Shumba.
Use It Professionally.
Record a short answer for each step, and practice discussing your work in interviews and at work. Share your strongest three pieces through one portfolio link.
Is this portfolio for you?
This program is for:
- Recent graduates and career changers with a basic understanding of GRC.
- Aspiring GRC analysts who want their first portfolio pieces.
- People taking or completing ISO/IEC 27001 Foundation training through any provider.
- Professionals who want to see how ISO/IEC 27001 works in practice.
Previous work experience, certifications and PECB training are optional. You need a basic understanding of governance, risk management, and compliance (GRC), and a willingness to read, write, make decisions and revise your work. Existing knowledge of ISO/IEC 27001 helps; if it is new to you, allow additional study time.
Guided tasks, templates, and feedback on every step.
Your portfolio materials
- The TechFlow company brief.
- Five guided tasks in one portfolio template, with worked examples.
- A word list, and optional knowledge-check questions on ISO/IEC 27001 Foundation topics.
- A showcase format for sharing your best three pieces through one link.
Your mentor support
- One written review from Dr. Rose Shumba for each of the five steps, returned within three working days.
- Live group office hours every two weeks, where you can ask questions and discuss your work.
Your 90 days of mentor support begin when you enroll. You keep access to the program materials for 6 months.
Get feedback from Dr. Rose Shumba.
Dr. Rose Shumba brings more than twenty years of cybersecurity education experience. She is a PECB Certified ISO/IEC 27001 Senior Lead Implementer and a PECB Certified ISO/IEC 42001 Lead Implementer, and a former director of a National Security Agency and Department of Homeland Security Center of Academic Excellence in Cyber Defense.
She writes the feedback on your portfolio steps and leads the group office hours, helping you examine your decisions and explain your work more clearly.
Frequently asked questions
Who can join?
This program is for recent graduates, career changers, and professionals who have a basic understanding of governance, risk management, and compliance (GRC) and want practical work samples they can show and explain.
You do not need previous work experience or a particular certification. You should have a basic understanding of governance, risk management, and compliance (GRC) through coursework, training, or independent study. If ISO/IEC 27001 is new to you, allow additional time to learn the relevant concepts as you complete your project.
I'm new to ISO/IEC 27001. Can I still take part?
Yes, if you have a basic understanding of governance, risk management, and compliance (GRC). You'll work through a fictional company case using guided tasks, templates, and feedback. Allow additional time to learn the ISO/IEC 27001 concepts as you complete the project.
This is a practical portfolio program. It does not include a full certification training course.
Do I need PECB training to join?
You can join without PECB training. You need a basic understanding of governance, risk management, and compliance (GRC), from coursework, training from any provider, or independent study. The project follows ISO/IEC 27001, so plan to use ISO/IEC 27001 learning resources as you complete the tasks.
When should I build my portfolio?
You can build it on its own, alongside a training course, or after one.
Does this program include teaching lessons?
This program is a self-paced portfolio project, focused on applying your learning. Each step includes a short explanation of the terms its tasks use, and the word list defines the rest. If you want recorded teaching lessons and guided portfolio work together, explore the GRC Build-and-Defend Studio.
How long does it take?
About four to six hours for the five steps, plus time for your short videos and revisions.
What will I build?
An executive security summary, a program charter, an ISMS scope and asset profile, a risk register, and a short map of your work to NIST CSF 2.0 with one assessed outcome.
Is this real client work?
TechFlow Solutions is fictional, and the project is simulated practice. When you share your portfolio, identify it as a simulation and explain what you personally completed.
How does the feedback work?
During your 90 days, you submit each step's written piece and video together for one written review from Dr. Rose Shumba, returned within three working days. You use the feedback to revise your work on your own. Group office hours every two weeks are the place to ask about your revisions.
Does this include PECB training or certification?
This is a Tech Academy portfolio program. PECB training, examinations, certification applications and credentials are separate. The Tech Academy also offers PECB certification training for learners who want that pathway.
Does the portfolio guarantee a job?
It gives you simulated work samples and practice explaining your approach. Employment outcomes depend on factors beyond this program.
What is the refund policy?
All our programs are digital. Once access to the program has been provided, the purchase is non-refundable. Please review the program description and what is included before enrolling.
Build work you can show and explain.
Build five simulated portfolio pieces, receive written feedback from Dr. Rose Shumba, and practice explaining the decisions behind your work.
USD $287
Enroll in the PortfolioThis is a simulated portfolio project. Certification training and examinations are purchased separately.
