Course Outline
I. Introduction to Information Security
1. Systemic approach to information security management
2. Organizational benefits and added value
II. Overview of ISO 27001 Requirements
1. Key requirements of the standard
2. Critical areas of focus
3. Documentation requirements
4. Overview of Annex A
III. Information Security Management System Compliant with ISO 27001
1. Components of an ISO 27001-compliant Information Security Management System
2. Exercises on interpreting and analyzing ISO 27001 requirements
IV. Audits – General Information
1. Introduction to auditing
2. Overview of the audit process
3. Audit criteria
4. Types of audits
V. Audit Planning and Preparation
1. Defining audit criteria and scope
2. Selecting the audit team
3. Process approach to internal audits
4. Key considerations for developing audit question lists
5. Conducting audits per ISO 19011:2018
6. Practical exercises
VI. Conducting the Audit – On-Site Guidelines
1. Auditing techniques
2. Gathering objective evidence
3. Identifying and demonstrating non-conformities
4. Competencies of the lead auditor
5. Practical exercises
VII. Documenting Audit Results
1. Clear articulation of findings
2. Recording non-conformities
3. Identifying and documenting insights and improvement opportunities
4. Summary of Audit Results – Audit Report
5. Practical exercises
VIII. Effective Post-Audit Activities
1. Responsibilities for initiating corrective actions
2. The importance of accurately determining root causes of non-conformity
3. Defining corrective actions
4. Evaluating the effectiveness of actions taken
5. Post-audit activities related to insights and improvement potentials
6. Practical exercises
IX. Discussion and Summary
Requirements
Target Audience
- Professionals preparing to take on the role of ISO 27001:2023 Lead Auditor.
- Any individual with a keen interest in this subject matter.
Testimonials (1)
Speed of response and communication
