ISO27001LA - ISO/IEC27001 Lead Auditor

Overview

Duration: 5.0 days

As both consumers and organizations are facing an increasing number of threats and attacks against their personal and financial data, information security has become more and more important for all the organizations regardless of their size and complexity. Also, both consumers and legislators are expecting additional protection of information from the organizations they deal with. The need for information security is greater than ever and is expected to constantly increase. The principal competencies and knowledge skills needed by the market are the ability to proficiently plan and perform audits compliant with the certification process of the ISO/IEC 27001:2013 standard, to master and manage the audit techniques, (or be part of) audit teams and audit programs. This 5 day instructor led classroom training will equip participants a thorough understanding of the requirements of the ISO/IEC27001:2013 standard and how an organization should go about complying with the requirements of the standard. This training will also equip auditors with the knowledge and competency needed to perform an audit for a information security management system.

Objectives

On completion of this course, the following learning outcomes will be achieved

• Understand the operations of an Information Security Management
• System based on ISO/IEC 27001 Acknowledge the correlation between ISO/IEC 27001,ISO/IEC 27002 and other standards and regulatory frameworks
• Understand an auditor’s role to: plan, lead and follow-up on a management system audit in accordance with ISO 19011
• Learn how to lead an audit and audit team
• Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquire the competencies of an auditor to: plan an audit, lead an audit, draft reports, and follow-up on an audit in compliance with ISO 19011

Content

• Introduction to Information Security Management Systems (ISMS) and ISO/IEC
• 27001
• Audit principles, preparation and launching of an audit
• On-site audit activities
• Closing the audit
• Certification Exam

The course will cover the following competency domains:

• Domain 1:Fundamental principles and concepts of Information Security Management System(ISMS)
• Domain 2:Information Security Management System (ISMS)
• Domain 3:Fundamental audit concepts and principles
• Domain 4:Preparation of an ISO/IEC 27001 audit
• Domain 5:Conducting an ISO/IEC 27001 audit
• Domain 6:Closing an ISO/IEC 27001 audit
• Domain 7:Managing an ISO/IEC 27001 audit program

Audience

The target audience for this course and qualification are:

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits;
• Managers or consultants seeking to master an Information Security Management System audit process;
• Individuals responsible for maintaining conformance with Information Security Management System requirements;
• Technical experts seeking to prepare for an Information Security Management System audit
• Expert advisors in Information Security Management.

Prerequisites

A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles

Certification

This course is not associated with any Certification.