COURSE OBJECTIVE:
After completing this course you shoud be able to:
• Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/ IEC 27001
• Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor
• Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
• Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing
• Manage an ISO/IEC 27001 audit program
TARGET AUDIENCE:
Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits. Managers or consultants seeking to master an Information Security Management System audit process. Individuals responsible for maintaining conformance with Information Security Management System requirements. Technical experts seeking to prepare for an Information Security Management System audit. Expert advisors in Information Security Management.
COURSE PREREQUISITES:
A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.
COURSE CONTENT:
Day 1: Introduction to Information Security Management Systems (ISMS) and ISO/IEC 27001
• Training Course Objectives and Structure
• Standards and Regulatory Frameworks
• Certification Process
• Fundamental concepts and principles of information security
• Information security management system (ISMS)
Day 2: Audit principles, preparation and launching of an audit
• Fundamental audit concepts and principles
• The impact of trends and technology in auditing
• Evidence-based auditing
• Risk-based auditing
• Initiation of the audit process
• Stage 1 audit
Day 3: On-site audit activities
• Preparing for stage 2 audit
• Stage 2 audit
• Communication during the audit
• Audit procedures
• Creating audit test plans
Day 4: Closing the audit
• Drafting audit findings and nonconformity reports
• Audit documentation and quality review
• Closing of the audit
• Evaluation of action plans by the auditor
• Beyond the initial audit
• Managing an internal audit program
• Closing of the training course
FOLLOW ON COURSES: