Course Summary
With the use of widely accepted audit principles, methods, and methodologies, this 5-day ISO/IEC 27001:2022 ISMS Lead Auditor Training Course will assist you to effectively execute an Information Security Management System (ISMS) 3rd Party Audit.
You will learn how to design and execute internal and external audits in accordance with ISO 19011:2018 and the ISO/IEC 17021-1 certification process throughout this training course.
Who Should Attend?
• Auditors who want to conduct and serve as Lead Auditors for Information Security Management System (ISMS) audits.
• Managers or consultants who want to master the auditing process for information security management systems.
• Individuals is charge of maintaining an organization’s compliance with the ISMS regulations.
• Professionals in the field of technology attempting to be ready for the information security management system audit.
• Information security management specialists.
Course Objectives
By the end of the course, the learner will be able to:
• Give an explanation of the core ideas and rules underlying an information security management system (ISMS) based on ISO/IEC 27001
• From the perspective of an auditor, interpret the ISO/IEC 27001 specifications for an ISMS
• Determine whether the ISMS complies with ISO/IEC 27001 requirements using the basic audit ideas and principles.
• Plan, carry out, and conclude an ISO/IEC 27001 compliance audit in accordance with the requirements of ISO/IEC 17021-1, the principles of ISO 19011, and other auditing best practises.
• Successfully manage a programme for ISO/IEC 27001 audits
Course Modules
1. Introduction to information security management
2. Key changes in ISO 27001:2013 vs ISO 27001:2022
3. Objectives and benefits of an ISMS
4. Key Principles and Concepts of the ISMS
5. Code of practice ISO/IEC 27001:2022
6. Certification specification ISO/IEC 27001:2022
7. Certification to ISO/IEC 27001:2022
8. The ISO 27000 series of standards
9. ISO/IEC 27001:2022 requirements
10. The ISMS Audit Planning
11. The ISMS Audit Preparation
12. How to conduct an Audit Opening Meeting
13. Conducting an ISMS Audit
14. Recording of audit findings
15. Root Cause Identification
16. Presentation of audit findings
17. How to conduct an Audit Closing Meeting
18. Conducting Audit Follow-Up
19. Overview of Management Systems Certification
20. Scope, Definitions and Principles
21. Organisation and Governance
22. Operational Control
23. Impartiality
24. Management of Competence
25. Developing a New Certification Scheme
26. The Certification Process including:
• Programme Planning
• Audits and Integration – Programming, Planning, Meeting Objectives and Reporting
• Decision Making
• Management System Requirements
Benefits
• The internal audit process will benefit from auditors who have received the proper training.
• Conformance to the Information Security Management Systems Standard
• Continual improvement of processes with the organisation.
• Identification of key areas of interest to Certification Bodies as the training covers the objectives of the certification criteria as well as processes, policies, and procedures.
Certification
• Certificate of Attendance
• Certificate of Competency
Assessment
There will not be an assessment at the end of the course for traditional classroom training however the following applies for eLearning:
• Delegates have to complete the assessment with a minimum score of 60% to receive a Certificate of Competence.
• Delegates who score between 40% and 59% will get a second attempt at the assessment.
• Delegates who score lower than 40% or fail the second attempt, will need to repurchase the course.
• Delegates will receive a Certificate of Attendance regardless of a pass or fail.
Learning Outcomes
- Participants with the knowledge and practical skills to plan, conduct, report, and follow up on ISO/IEC 27001:2022 Information Security Management System (ISMS) audits in accordance with ISO 19011 and certification audit principles.
CERTIFICATE PREVIEW