ISO 27001:2013 Lead Auditor Training Course
PR320: Information Security Management System ISO 27001:2013 Lead Auditor (CQI and IRCA Course Approval No – 17631)
Course Description:
To make any management system successful, auditing is a very basic and most important element. This course is an intensive and highly-rated 5-day program for the preparation of delegates in conducting audits and verifying conformance with ISO 27001:2013 in accordance with ISO 19011. The overall concept of the course is to provide practical and theoretical knowledge of the Information Security Management System with respect to auditing.
During this training course, you will acquire the knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 certification process.
Based on practical exercises, you will be able to master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution.
The 5-day training program consists of exercises that are designed to help you practice the most important aspects of an ISMS audit: ISO 27001 requirements, auditing principles, tools and techniques used to obtain evidence, leading a team of auditors, conducting interviews with auditees, reviewing documented information, drafting nonconformity reports, and preparing the final audit report.
After acquiring the necessary expertise to perform this audit, you can sit for the exam and apply for a CQI-IRCA-approved RICI ISO 27001 Lead Auditor credential. By holding a CQI-IRCA-approved ISO 27001 Lead Auditor Certificate, you will demonstrate that you have the capabilities and competencies to audit organizations based on best practices.
Benefits:
Auditing ensures the set of rules towards the measures that are being implemented to protect an organization and its customers in an effective and result-oriented manner. ISO27001 certification ensures that your information is protected. It helps you avoid data breaches, fines, and brand damage. Around the globe, cyber-attacks are common and an internationally accepted ISO 27001 certification demonstrates your cyber-security.
Objectives:
Ability to understand the responsibilities of an internal auditor and the role of an internal auditor in maintaining and improving ISMS, in accordance with ISO 27001. Able to plan and prepare for an internal audit, gather audit evidence through observation, interviews and sampling of documents and records.
Course Contents:
The course includes lectures, interactive group and individual workshops, case-studies, role-play exercises, simulation of real-time scenarios, including the following topics:
- Plan, perform, conduct and follow-up an audit in accordance with ISO 19011; and through analysis of ISO 27001:2013.
- Introduction to Control clauses, Objectives & Controls
- ISMS Purpose & Business Benefits
- Risk Assessments & Selection of Controls
- Requirements of ISO 27001
- Auditing Guidelines as per ISO 27001 & 19011
Who Should Attend:
Organizations wanting to implement an Information Security management system under the umbrella of ISO 27001:2013 or individuals who want to further their careers as ISMS Auditors:
- Auditors interested in performing and leading ISMS certification audits
- Managers or consultants interested in advancing their knowledge of the ISMS audit process
- Internal auditors and individuals responsible for maintaining conformity to the requirements of ISO 27001
- Technical experts interested in preparing for an ISMS audit
- Expert advisors in Information Security Management System
Prerequisites
No prerequisites. However, having knowledge about the standard is helpful.
Course Duration:
5 Days
