Helios Advisory

ISO Standards

Fourteen courses to understand and apply the main ISO standards, from quality to artificial intelligence, including information security, risk, business continuity, compliance, the environment and software functional size measurement.

ISO 9001: Implementing and Managing a Quality Management System

Understand the requirements of ISO 9001 and apply them to improve customer satisfaction over time

Practical course — 2 days — 14 hours — Réf. HA-9001
Price: contact us

Description

ISO 9001 is the international reference standard for quality management systems. It sets requirements that can be certified by a third party and is based on the process approach, continual improvement and risk-based thinking.

This two-day course presents the requirements in the order of the standard’s structure, then shows how to apply them and keep them alive in an organisation, up to the certification audit.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the quality management principles and the structure of the standard
  • Map an organisation’s processes and set their indicators
  • Identify quality-related risks and opportunities
  • Build the necessary documentation without overloading it
  • Prepare an internal audit and the certification audit

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Principles and structure of the standard

  • Place the seven quality management principles
  • Understand the structure shared by management system standards
  • Define the context, interested parties and scope
  • Set the quality policy and objectives

Practical work: analysing the context and interested parties of a fictitious company.

2. Process approach and operational control

  • Map processes and their interactions
  • Define owners, resources and indicators
  • Control purchasing, production and customer relations
  • Handle nonconformities

Practical work: mapping processes and choosing five key indicators.

3. Risks, measurement and improvement

  • Identify risks and opportunities
  • Measure customer satisfaction
  • Run the management review
  • Implement corrective actions

Practical work: building a quality risk register and an action plan.

4. Audit and certification

  • Prepare and run an internal audit
  • Write factual findings
  • Understand how a certification audit works
  • Maintain certification over time

Practical work: simulating an internal audit of a process.

Participants

Quality managers, managers, process owners, internal auditors and certification project leads.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO/IEC 27001 and 27002: Managing Information Security

Set up an information security management system and choose the right security controls

Practical course — 3 days — 21 hours — Réf. HA-27001
Price: contact us

Description

ISO/IEC 27001 sets the requirements for an information security management system (ISMS), which can be certified by a third party. ISO/IEC 27002 complements it with detailed guidance on security controls. Together, they underpin many regulatory frameworks, including DORA for the financial sector and the NIS 2 Directive.

This three-day course covers the full cycle: scoping the ISMS, risk assessment, choice of controls, statement of applicability, monitoring and preparation for certification.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the structure and requirements of ISO/IEC 27001
  • Carry out an information security risk assessment and treatment
  • Select security controls using ISO/IEC 27002
  • Draft a statement of applicability
  • Link the ISMS with DORA and NIS 2
  • Prepare an internal audit and the certification audit

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Scoping the management system

  • Define the context, interested parties and scope
  • Set the security policy and roles
  • Place the links with DORA and NIS 2
  • Plan the implementation project

Practical work: defining the scope and security policy of a fictitious company.

2. Assessing and treating risks

  • Identify assets, threats and vulnerabilities
  • Assess likelihood and impact
  • Choose treatment options
  • Have residual risks accepted by management

Practical work: risk assessment of a critical business process.

3. Choosing security controls

  • Review the organisational, people, physical and technological controls in ISO/IEC 27002
  • Draft the statement of applicability
  • Manage suppliers and cloud services
  • Manage incidents and continuity

Practical work: drafting a justified statement of applicability.

4. Monitoring, auditing and certification

  • Define security indicators
  • Run an internal audit
  • Prepare the management review
  • Understand the certification steps

Practical work: simulating an internal audit of access management.

Participants

Chief information security officers, IT managers, risk managers, auditors, compliance officers and project managers.

Prerequisites

General knowledge of information systems. No advanced technical skills are required.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO/IEC 42001: Implementing an Artificial Intelligence Management System

Govern the development and use of AI with a certifiable management system

Practical course — 2 days — 14 hours — Réf. HA-42001
Price: contact us

Description

ISO/IEC 42001 is the first international management system standard dedicated to artificial intelligence. It sets certifiable requirements to develop, provide or use AI systems responsibly, while controlling their risks and impacts.

This two-day course presents the requirements of the standard and its reference controls, then shows how to align it with the EU Artificial Intelligence Act and with existing management systems such as ISO 9001 or ISO/IEC 27001.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the structure and requirements of ISO/IEC 42001
  • Inventory an organisation’s AI systems and define the scope
  • Carry out a risk assessment and an impact assessment of AI systems
  • Choose suitable controls from those proposed by the standard
  • Align the standard with the EU AI Act
  • Prepare for certification

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Understanding the standard and its context

  • Place the standard among AI standards
  • Understand the structure shared by management systems
  • Define the roles: AI provider, user, producer
  • Place the links with the EU AI Act

Practical work: inventory of a fictitious organisation’s AI systems and scoping.

2. Risks and impacts of AI systems

  • Assess risks: bias, errors, security, confidentiality
  • Carry out an impact assessment on people and society
  • Set acceptance criteria
  • Document decisions

Practical work: impact assessment of an automated CV screening tool.

3. Controls and the AI life cycle

  • Govern data, development and validation
  • Ensure transparency and information for users
  • Control suppliers and third-party models
  • Monitor systems in production

Practical work: selecting and justifying the controls for a use case.

4. Managing and certifying

  • Set the AI policy and objectives
  • Integrate AI into existing management systems
  • Run an internal audit
  • Prepare the certification audit

Practical work: twelve-month compliance roadmap.

Participants

AI and data leads, compliance officers, risk managers, CIOs, lawyers and AI project managers.

Prerequisites

Basic knowledge of artificial intelligence. The Generative Artificial Intelligence Ecosystem course (Réf. HA-IAG) is recommended.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 31000: Structuring Risk Management

Build a consistent risk management framework, from identification to monitoring

Practical course — 2 days — 14 hours — Réf. HA-31000
Price: contact us

Description

ISO 31000 provides guidelines for risk management that apply to any organisation and any type of risk. It is not a requirements standard: it cannot be certified, but it serves as a common reference for structuring a risk management framework.

This two-day course presents the principles, the organisational framework and the risk management process, then applies them to practical cases, from the risk map to reporting to management.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the principles, framework and process of ISO 31000
  • Identify, analyse and evaluate risks
  • Choose and track treatment actions
  • Build a risk map
  • Define risk appetite and management reporting

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of guidance, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Principles and framework

  • Place the risk management principles
  • Define the role of management and governance
  • Integrate risk management into decisions
  • Place ISO 31000 relative to other frameworks

Practical work: diagnosis of a fictitious organisation’s risk management framework.

2. Identifying and analysing risks

  • Set the context and risk criteria
  • Identify risks through workshops and interviews
  • Analyse likelihood and consequences
  • Use the main assessment techniques

Practical work: risk identification workshop on an international expansion project.

3. Evaluating and treating

  • Build a risk map
  • Define risk appetite and tolerance
  • Choose treatment options
  • Track action plans

Practical work: risk map and treatment plan for the top ten risks.

4. Monitoring and reporting

  • Define risk indicators
  • Organise periodic reviews
  • Report to management and the board
  • Build a risk culture

Practical work: risk dashboard presented to the executive committee.

Participants

Risk managers, internal controllers, auditors, compliance officers, finance directors and project managers.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 22301: Ensuring Business Continuity

Prepare the organisation to face a major disruption and resume its essential activities

Practical course — 2 days — 14 hours — Réf. HA-22301
Price: contact us

Description

ISO 22301 sets the requirements for a business continuity management system, which can be certified by a third party. It helps an organisation identify its essential activities, anticipate disruptions and resume operations within acceptable timeframes. It aligns with the continuity requirements of DORA for the financial sector.

This two-day course covers business impact analysis, continuity strategies, plans, exercises and improving the framework.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO 22301
  • Carry out a business impact analysis
  • Set acceptable recovery times and levels
  • Choose continuity strategies
  • Write plans and organise exercises

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and requirements

  • Understand the structure of the standard
  • Define the scope and continuity policy
  • Organise roles and crisis management
  • Place DORA’s continuity requirements

Practical work: defining the continuity scope of a fictitious company.

2. Impact analysis and risk assessment

  • Identify essential activities
  • Set maximum tolerable downtime and recovery times
  • Identify critical resources and dependencies
  • Assess disruption risks

Practical work: business impact analysis of three essential activities.

3. Strategies and plans

  • Choose strategies: backup sites, redundancy, suppliers
  • Write the business continuity plan and crisis management plan
  • Organise crisis communication
  • Take suppliers into account

Practical work: writing a continuity plan for a critical activity.

4. Exercises and improvement

  • Design an exercise programme
  • Run a tabletop exercise
  • Learn lessons and update plans
  • Prepare the certification audit

Practical work: tabletop exercise simulating a cyberattack that shuts down systems.

Participants

Business continuity managers, risk managers, IT, security and operations managers, auditors.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 21502: Project Management Guidance

Align project management practices with the international reference

Practical course — 2 days — 14 hours — Réf. HA-21502
Price: contact us

Description

ISO 21502 provides guidance on project management that applies to any type of project and any approach, whether predictive, agile or hybrid. It is not a certifiable standard: it serves as a common reference to harmonise practices and connect with other frameworks such as the PMBOK or PRINCE2.

This two-day course presents the content of the standard and uses it to assess and improve an organisation’s project practices.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the structure and concepts of ISO 21502
  • Place the roles of governance and the sponsor
  • Apply integrated project management practices
  • Compare the standard with the PMBOK and PRINCE2
  • Assess and improve the organisation’s practices

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of guidance, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Concepts and context

  • Place projects, programmes and portfolios
  • Understand the life cycle and development approaches
  • Define governance and the sponsor’s role
  • Link the project to expected benefits

Practical work: analysing the governance of an existing project.

2. Integrated management practices

  • Prepare and start the project
  • Plan, control and close
  • Manage changes and decisions
  • Report on progress

Practical work: drafting a project brief.

3. Management practices by area

  • Scope, schedule and cost
  • Risks, issues and quality
  • Stakeholders, communication and resources
  • Procurement and knowledge

Practical work: reviewing a project plan using the standard’s practices.

4. Comparing and improving

  • Compare ISO 21502, the PMBOK and PRINCE2
  • Assess the maturity of project practices
  • Adapt internal methods
  • Build an improvement plan

Practical work: self-assessment of a department’s project practices.

Participants

Project managers, project directors, PMO members, sponsors and methods leads.

Prerequisites

Some project experience is recommended.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 21504: Managing a Portfolio of Projects and Programmes

Select, prioritise and steer project investments in support of strategy

Practical course — 2 days — 14 hours — Réf. HA-21504
Price: contact us

Description

ISO 21504 provides guidance on managing portfolios of projects and programmes. It helps an organisation choose the right projects, make trade-offs between them and check that they contribute to strategy. It is not a certifiable standard.

This two-day course presents the principles and processes of the standard, then applies them to building and steering a portfolio.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the principles and processes of ISO 21504
  • Link the portfolio to strategic objectives
  • Define selection and prioritisation criteria
  • Organise governance and trade-offs
  • Track portfolio performance and benefits

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of guidance, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Principles and governance

  • Distinguish projects, programmes and portfolios
  • Link the portfolio to strategy
  • Define bodies and roles
  • Set trade-off rules

Practical work: defining the portfolio governance of a fictitious company.

2. Selecting and prioritising

  • Collect project requests
  • Define value, risk and alignment criteria
  • Build a scoring grid
  • Balance the portfolio

Practical work: prioritising fifteen candidate projects.

3. Steering the portfolio

  • Track progress and resource use
  • Reallocate budgets and capacity
  • Stop or redirect projects
  • Report to management

Practical work: simulated portfolio committee with trade-off decisions.

4. Measuring benefits and improving

  • Define and track benefits
  • Assess portfolio management maturity
  • Place related standards on projects and programmes
  • Build an improvement plan

Practical work: portfolio dashboard and improvement plan.

Participants

Portfolio directors, PMO heads, strategy and transformation directors, management controllers.

Prerequisites

Experience steering projects or programmes is recommended.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 37301: Building a Compliance Management System

Organise compliance in a structured way, from identifying obligations to reporting

Practical course — 2 days — 14 hours — Réf. HA-37301
Price: contact us

Description

ISO 37301 sets the requirements for a compliance management system, which can be certified by a third party. It helps an organisation identify its obligations, assess compliance risks, put controls in place and promote a compliance culture.

This two-day course presents the requirements of the standard and applies them to building a compliance framework proportionate to risk.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO 37301
  • Inventory the organisation’s compliance obligations
  • Assess compliance risks
  • Set up controls, training and whistleblowing arrangements
  • Monitor and report on compliance

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and leadership commitment

  • Understand the structure of the standard
  • Define the scope and compliance policy
  • Organise the compliance function and its independence
  • Place the links with ISO 37001 and other frameworks

Practical work: diagnosis of a fictitious company’s compliance framework.

2. Obligations and risks

  • Inventory legal, regulatory and contractual obligations
  • Assess compliance risks
  • Prioritise risks
  • Keep regulatory monitoring up to date

Practical work: obligations register and compliance risk map.

3. Controls and culture

  • Set up controls
  • Train and raise awareness
  • Organise whistleblowing arrangements
  • Handle breaches and investigations

Practical work: designing a training plan and whistleblowing arrangements.

4. Monitoring and improvement

  • Define compliance indicators
  • Run internal audits
  • Report to management and the board
  • Prepare for certification

Practical work: annual compliance report presented to the board.

Participants

Compliance officers, lawyers, internal controllers, risk managers, auditors and executives.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 37001: Preventing Bribery

Set up an anti-bribery management system and align it with French anti-corruption law

Practical course — 2 days — 14 hours — Réf. HA-37001
Price: contact us

Description

ISO 37001 sets the requirements for an anti-bribery management system, which can be certified by a third party. It covers leadership commitment, risk assessment, due diligence on partners, financial controls and whistleblowing arrangements.

This two-day course presents the requirements of the standard and shows how it matches the measures required in France by the Sapin II law, overseen by the French Anti-Corruption Agency.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO 37001
  • Build a bribery risk map
  • Assess the integrity of third parties
  • Set up controls and whistleblowing arrangements
  • Align the standard with the Sapin II measures

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and commitment

  • Understand the structure of the standard
  • Set the anti-bribery policy and code of conduct
  • Organise the anti-bribery compliance function
  • Place the Sapin II requirements

Practical work: comparing the standard’s requirements with the Sapin II measures.

2. Assessing risks

  • Build the bribery risk map
  • Identify risk situations: gifts, intermediaries, tenders
  • Assess risks by process
  • Prioritise actions

Practical work: bribery risk map of an exporting company.

3. Third parties and controls

  • Assess the integrity of customers, suppliers and intermediaries
  • Set up accounting and financial controls
  • Govern gifts, hospitality and donations
  • Organise whistleblowing arrangements

Practical work: integrity assessment of a foreign sales intermediary.

4. Training, auditing and improving

  • Train exposed staff
  • Run internal audits
  • Handle breaches
  • Prepare for certification

Practical work: training plan and one-year audit programme.

Participants

Compliance officers, lawyers, finance directors, buyers, internal controllers and auditors.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 14001: Implementing an Environmental Management System

Control the organisation’s environmental impacts and improve its performance

Practical course — 2 days — 14 hours — Réf. HA-14001
Price: contact us

Description

ISO 14001 sets the requirements for an environmental management system, which can be certified by a third party. It helps an organisation identify its environmental aspects, meet its obligations and improve its performance, taking into account the life cycle of its products and services.

This two-day course presents the requirements of the standard and shows how the environmental management system feeds the company’s sustainability strategy and reporting.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO 14001
  • Identify significant environmental aspects and impacts
  • Inventory environmental compliance obligations
  • Set objectives and manage environmental performance
  • Prepare an internal audit and certification

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and requirements

  • Understand the structure of the standard
  • Define the context, scope and environmental policy
  • Include the life cycle perspective
  • Place the links with sustainability reporting

Practical work: analysing the environmental context of a fictitious company.

2. Aspects, impacts and obligations

  • Identify environmental aspects
  • Assess their significance
  • Inventory compliance obligations
  • Assess risks and opportunities

Practical work: environmental review of a logistics site.

3. Operational control

  • Set objectives and indicators
  • Control operations and purchasing
  • Prepare for emergencies
  • Raise staff awareness

Practical work: one-year environmental action plan.

4. Measurement, audit and improvement

  • Monitor and measure performance
  • Evaluate compliance
  • Run an internal audit and the management review
  • Prepare for certification

Practical work: simulating an environmental internal audit.

Participants

Environment, CSR and quality managers, site managers, buyers, internal auditors.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO 50001: Managing Energy Performance

Reduce energy consumption over time with an energy management system

Practical course — 2 days — 14 hours — Réf. HA-50001
Price: contact us

Description

ISO 50001 sets the requirements for an energy management system, which can be certified by a third party. It helps an organisation measure its consumption, identify its significant energy uses and improve its energy performance in a continual and verifiable way.

This two-day course presents the requirements of the standard, from the energy review to tracking indicators, and links it to the energy audit obligations of large companies.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO 50001
  • Carry out an energy review
  • Identify significant energy uses
  • Set an energy baseline and energy performance indicators
  • Build and track an energy action plan

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and requirements

  • Understand the structure of the standard
  • Define the scope and energy policy
  • Organise the energy team
  • Place the energy audit obligations

Practical work: defining the energy scope of a fictitious company.

2. Energy review

  • Collect and analyse consumption data
  • Identify significant energy uses
  • Set the energy baseline
  • Choose energy performance indicators

Practical work: energy review of a site from consumption data.

3. Action plan and operational control

  • Identify savings opportunities
  • Assess and prioritise actions
  • Include energy in purchasing and design
  • Control the operation of installations

Practical work: three-year costed action plan.

4. Measurement and improvement

  • Set up the measurement plan
  • Verify the savings achieved
  • Run the internal audit and management review
  • Prepare for certification

Practical work: energy dashboard and simulated management review.

Participants

Energy, environment and facilities managers, site and production managers, energy buyers, auditors.

Prerequisites

No prerequisites. Some experience of how the participant’s organisation works helps.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

ISO/IEC 20000-1: Managing IT Services

Organise IT service delivery around a certifiable management system

Practical course — 2 days — 14 hours — Réf. HA-20000
Price: contact us

Description

ISO/IEC 20000-1 sets the requirements for a service management system, applied in practice to IT services and certifiable by a third party. It covers the design, transition, delivery and improvement of services, as well as relationships with customers and suppliers.

This two-day course presents the requirements of the standard and shows how it structures practices often inspired by ITIL, with verifiable indicators and service commitments.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the requirements of ISO/IEC 20000-1
  • Define the service catalogue and service levels
  • Organise incident, request, problem and change management
  • Manage suppliers and customer relationships
  • Prepare an internal audit and certification

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Framework and requirements

  • Understand the structure of the standard
  • Define the scope and service management policy
  • Place the standard relative to ITIL
  • Organise roles

Practical work: defining the service scope of a fictitious IT department.

2. Service design and commitments

  • Build the service catalogue
  • Define service levels and indicators
  • Manage capacity and availability
  • Manage service continuity

Practical work: drafting a service level agreement.

3. Delivery and support

  • Manage incidents and requests
  • Handle problems
  • Control changes and releases
  • Manage suppliers

Practical work: analysing a major incident, from detection to problem resolution.

4. Monitoring and improvement

  • Measure service performance
  • Report to customers
  • Run the internal audit and management review
  • Prepare for certification

Practical work: service dashboard and improvement plan.

Participants

IT service directors and managers, operations, support and supplier relationship managers, auditors.

Prerequisites

Experience of IT services is recommended. Knowledge of ITIL helps but is not essential.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

IFPUG (ISO/IEC 20926): Measuring Software Functional Size in Function Points

Count function points with the IFPUG method to estimate, compare and steer IT projects

Practical course — 2 days — 14 hours — Réf. HA-IFPUG
Price: contact us

Description

The IFPUG method, standardised as ISO/IEC 20926, measures the functional size of software in function points, based on what it delivers to users and independently of technology. It sits within the framework set by the ISO/IEC 14143 family of standards on functional size measurement.

This two-day course teaches participants to apply the counting rules to real specifications, then to use the measured size to estimate effort, compare productivity and manage service contracts.

Learning objectives

By the end of the course, participants will be able to:

  • Place functional size measurement and the ISO/IEC 14143 framework
  • Identify the scope and boundary of the application to measure
  • Count data functions: internal and external logical files
  • Count transactional functions: inputs, outputs and inquiries
  • Use function points to estimate, benchmark and contract

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Principles of functional measurement

  • Place functional size measurement and its uses
  • Understand the ISO/IEC 14143 framework
  • Define the purpose, scope and boundary of the count
  • Identify functional user requirements

Practical work: defining the scope and boundary of an order management application.

2. Data functions

  • Identify internal and external logical files
  • Determine data element types and record element types
  • Apply the complexity tables
  • Avoid common counting errors

Practical work: counting the data functions of a customer management module.

3. Transactional functions

  • Identify external inputs, outputs and inquiries
  • Distinguish elementary processes
  • Determine the complexity of each transaction
  • Count a development project and an enhancement project

Practical work: full count of a module from its specifications.

4. Using the measurement

  • Estimate effort and duration from size
  • Calculate and compare productivity indicators
  • Use function points in service contracts
  • Set up a measurement programme in the organisation

Practical work: estimating a project and comparing it with a productivity benchmark.

Participants

IT project managers, PMO leads, IT management controllers, buyers of IT services, business analysts and software quality managers.

Prerequisites

Experience of IT projects or writing specifications is recommended.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

COSMIC (ISO/IEC 19761): Measuring Functional Size by Data Movements

Apply the COSMIC method to business, real-time and agile software to estimate and steer

Practical course — 2 days — 14 hours — Réf. HA-COSMIC
Price: contact us

Description

The COSMIC method, standardised as ISO/IEC 19761, measures the functional size of software by counting its data movements. Its unit is the COSMIC function point (CFP). It applies to business software as well as real-time or embedded software, and suits agile projects well, where size can be measured story by story.

This two-day course presents the measurement model, applies it to real specifications, then shows how to use size to estimate, track velocity and compare practice with the IFPUG method.

Learning objectives

By the end of the course, participants will be able to:

  • Explain the principles of the COSMIC method and its place in the ISO/IEC 14143 framework
  • Set the measurement strategy: purpose, scope, functional users and layers
  • Identify functional processes and data groups
  • Count data movements: Entries, Exits, Reads and Writes
  • Use COSMIC size to estimate and steer, including in agile

Teaching methods and resources

Presentations structured around the standard, case studies, application workshops and quizzes. Materials provided: summary of requirements, self-assessment grid, document templates and glossary. The text of the standard is not provided: it can be purchased from ISO or a national standards body.

Course programme

1. Principles and measurement strategy

  • Place COSMIC among functional measurement methods
  • Define the purpose and scope of the measurement
  • Identify functional users and software layers
  • Choose the level of granularity

Practical work: measurement strategy for an online ordering platform and its interfaces.

2. The measurement model

  • Identify triggering events and functional processes
  • Identify objects of interest and data groups
  • Identify data movements: Entry, Exit, Read, Write
  • Calculate size in COSMIC function points

Practical work: measuring a set of functional processes from specifications.

3. Special cases and approximation

  • Measure enhancements and fixes
  • Measure real-time software and interfaces
  • Use approximation methods early in a project
  • Compare COSMIC and IFPUG on the same scope

Practical work: approximate sizing of a project at the pre-project stage.

4. Using the measurement

  • Estimate effort from size
  • Size user stories and track velocity in agile
  • Build productivity and quality indicators
  • Use measurement in contracts and tenders

Practical work: productivity dashboard for an agile team based on COSMIC size.

Participants

Project managers and PMO leads, architects, business analysts, product owners, IT management controllers and buyers of IT services.

Prerequisites

Experience of IT projects is recommended. The IFPUG course (Réf. HA-IFPUG) helps but is not essential.

Trainer credentials

The experts who deliver our courses are specialists in the subjects covered. They are validated by our teaching teams on both subject knowledge and teaching ability, for each course they deliver. They have at least ten years of experience in banking or consulting and hold, or have held, positions of responsibility.

Assessment

The trainer assesses progress throughout the course through quizzes, case studies and simulations. Participants also complete a positioning test before and after the course to validate the skills acquired.

Teaching resources and materials

  • Audiovisual aids, documentation and course materials, applied practical exercises with worked solutions, case studies and presentation of real cases.
  • At the end of each course, Helios Advisory provides participants with a course evaluation questionnaire, which is then analysed by our teaching teams.
  • An attendance sheet per half-day is provided at the end of the course, together with a certificate of completion where the participant has attended the full session.

Enrolment and lead times

Enrolment is finalised with our teaching team. Send us your request through the contact form: we will confirm the next available sessions and the enrolment arrangements suited to your situation.

Accessibility

For any question or requirement relating to accessibility, contact us through the contact form. Each situation is reviewed with you so that the course arrangements can be adapted.

These courses prepare participants to implement the standards; they do not lead to a personnel certification (such as certified auditor or implementer). ISO standards are protected documents: their text is not provided and can be purchased from ISO or a national standards body. Helios Advisory is neither a certification body nor an ISO partner.

Practical information

The following applies to every programme presented on this page.

Funding

Several funding routes exist and depend on your professional situation: skills development plan, sector funding bodies, or direct company funding. Contact us so we can work out the most suitable option together.

Timetable

Courses run from 9.00 to 17.30, with a lunch break of one hour to an hour and a half. Participants are welcomed from 8.45. Breaks and lunches are provided. For four or five day courses, sessions finish at 16.00 on the final day.

Dates and locations

In-company and open sessions are arranged on request, at our premises, at yours, or remotely. Contact us for the next available dates and to agree the format best suited to your teams.

A question or a specific requirement?

Every programme can be adapted to your context, your sector and the level of your teams. We will come back to you with a tailored proposal, a schedule and a price matching your request.

This programme is an original work designed by the teaching teams of Helios Advisory. Any reproduction, representation, adaptation or exploitation, in whole or in part, without prior written authorisation, is strictly prohibited.