ISO/IEC 27001:2022 Information Security Management Systems Auditor / Lead Auditor Training Course

Description

Objectives

• Explain the purpose and business benefits of a ISMS, of information security management systems standards, of management system audit and of third-party certification.
• Explain the role of an auditor to plan, conduct, report and follow-up an ISMS audit in accordance with ISO 19011 and ISO/IEC 17021, where appropriate.
• Plan, conduct, report and follow up an audit of an ISMS to establish conformity or otherwise with ISO/IEC 27001 (with ISO/IEC 27002) in accordance with ISO 19011 and ISO/IEC 17021 where appropriate.

• Management systems;
• Understand the Plan-Do-Check-Act (PDCA) cycle; 
• Information security management;
• Knowledge of the following information security management principles and concepts:
• Awareness of the need for information security;
• The assignment of responsibility for information security;
• Incorporating management commitment and the interests of stakeholders;
• Enhancing societal values;
• Using the results of risk assessments to determine appropriate controls to reach acceptable levels of risk;
• Incorporating security as an essential element of information networks and systems; 
• The active prevention and detection of information security incidents;
• Ensuring a comprehensive approach to information security management;
• Continual reassessment of information security and making of modifications as appropriate.

Audience

• Auditors, consultants, managers and employees involved in the implementation of ISO/IEC 27001:2022 in organisations