ISO/IEC 27001 Lead Auditor

The ISO/IEC 27001 Lead Auditor training course enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognised audit principles, procedures, and techniques, specifically focusing on the ISMS process.

During this training course, you will acquire the knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process, including the risk management process and risk assessment.

Based on practical exercises, you will be able to master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution. 

WHAT YOU’LL LEARN

By the end of this ISO 27001 Lead Auditor course, participants will be able to:

• Explain the fundamental concepts and principles of information security management systems (ISMS) based on ISO/IEC 27001.

• Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor.

• Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and principles.

• Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing.

• Manage an ISO/IEC 27001 audit program. 

WHO IS THE COURSE FOR?

The ISO/IEC 27001 Lead Auditor course is designed for:

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits

• Managers or consultants seeking to master an Information Security Management System audit process

• Individuals responsible for maintaining conformance with Information Security Management System requirements

• Technical experts seeking to prepare for an Information Security Management System audit

• Expert advisors in Information Security Management

COURSE SUBJECTS

Introduction to the information security management system (ISMS) and ISO/IEC 27001

• ISO 27001 lead auditor training course objectives and structure

• Standards and regulatory frameworks

• Certification process

• Fundamental concepts and principles of information security

• Information security management system (ISMS)

Audit principles, preparation, and initiation of an audit

• Fundamental audit concepts and principles

• The impact of trends and technology in auditing

• Evidence-based auditing

• Risk-based auditing

• Initiation of the audit process

• Stage 1 audit

On-site audit activities

• Preparing for stage 2 audit

• Stage 2 audit

• Communication during the audit

• Audit procedures

• Creating audit test plans

Closing the audit

• Drafting audit findings and nonconformity reports

• Audit documentation and quality review

• Closing of the audit

• Evaluation of action plans by the auditor

• Beyond the initial audit

• Managing an internal audit program

• Closing of the training course

PREREQUISITES

A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.

INDUSTRY ASSOCIATION RECOGNITION

An Attestation of Course Completion worth 31 CPD (Continuing Professional Development) credits will be issued to participants who have attended the training course.