Course Outline
I. Information Security Management System compliant with the requirements of ISO 27001
1. Core components of the Information Security Management System under ISO 27001
2. Exercises on interpreting and analysing ISO 27001 requirements
II. Audits – general information
1. Overview of the entire audit process
2. Types of audits
III. Audit planning and preparation
1. Defining audit criteria and scope
2. Assembling the audit team
3. Applying a process approach to internal audits
4. Key considerations when developing control question lists
5. Practical exercises
IV. Conducting an audit – rules for conducting an on-site audit
1. Effective auditing techniques
2. Objective evidence
3. Identifying non-conformities and demonstrating them effectively
4. Practical exercises
V. Documenting audit results
1. Skillfully articulating inconsistencies
2. Documenting non-conformities
3. Identifying and documenting insights and improvement opportunities
4. Summarising audit results – the Audit Report
5. Practical exercises
VI. Effective post-audit activities
1. Responsibilities related to initiating corrective actions
2. The importance of precisely determining the causes of non-conformity
3. Defining corrective actions
4. Evaluating the effectiveness of actions
5. Post-audit activities concerning insights and improvement potentials
6. Practical exercises
VII. Discussion and summary
Requirements
Audience
- Individuals preparing to take on the role of an ISO 27001:2023 Internal Auditor
- Anyone with an interest in the subject matter
Testimonials (1)
Speed of response and communication
