ISO 27001 Lead Auditor Training and Certification ISMS

Course Outline

1. ISMS concepts and ISO 27001 standard

• ISMS concepts and benefits
• Risk assessment and management
• ISO 27001 process framework requirements
• ISO 27001 standard requirements
• ISMS documentation

2. Auditing principles

• Auditing objectives
• Types of audits
• Process approach

3. Roles and responsibility of auditors

• Auditors and lead auditors
• The auditors’ responsibilities
• The lead auditors’ responsibilities
• Auditors qualification and certifications

4. Planning an audit

• Pre-audit planning
• Reviewing documentation
• Developing an audit plan
• Preparing checklists or working documents
• Communication factors

5. Conducting an audit

• Opening meeting
• Collecting objective/audit evidence
• Effective interviewing techniques
• Identifying and recording nonconformities
• Preparing for the closing meeting
• Do’s and Don’ts of auditing

6. Reporting audit results

• Conducting the closing meeting
• Preparing the audit report
• Distributing the audit report

7. Corrective actions

• Corrective action responsibilities
• Follow up scheduling
• Monitoring corrective action

8. ISO 27001 registration

• Choosing a registrar
• The registration process
• Surveillance audits

9. Exercises / Roleplay (50% of course time)

Overview for?ISO 27001 Lead Auditor Course ISMS

Information being a valuable asset and a building block and key to the growth of any organization needs to be suitably protected like any other important business asset. In the modern world this asset becomes crucial for success and maintaining credibility.

If this asset is compromised then the organization may have to face various threats and risks like brand image erosion, business disruption, financial and productivity loss etc. Information security is the protection of information from a wide range of threats in order to ensure business continuity, minimize business risk, maximize return on investments and increase business opportunities.

The course will be conducted by our experienced lead auditors, who have audited numerous organizations. This intensive course is a key requirement in becoming a registered auditor / lead auditor. The course is structured to provide the knowledge and skills required to assess the Information Security Management System of an organization with respect to the requirements of the ISO 27001:2013?standard.

This comprehensive five-day course comprises of case studies, training, role-plays to ensure that the participant thoroughly understands the role of an auditor / lead auditor and acquires the expertise needed?to perform effective audits. Participants who successfully complete the course will be presented with an CQI-IRCA (International Register of Certificated Auditors) registered ‘Certificate Of Successful Completion.’

Also Check Out other Courses

COBIT 5 Foundation http://www.info-savvy.com/product/cobit5-foundation/

CISA:-?http://www.info-savvy.com/product/certified-information-systems-auditor-cisa/

CISM:-?http://www.info-savvy.com/product/certified-information-security-manager-cism/

CEH:-?http://www.info-savvy.com/product/certified-ethical-hacking-ceh/

PCI DSS?http://www.info-savvy.com/product/pci-dss-implementation-training-and-certification-qsa-certified/

ISO 27001 Lead Auditor Training and Certification ISMS