Course Outline
I. Introduction to Information Security
1. Systemic information security management
2. Benefits and added value for the organization
II. Overview of ISO 27001 requirements
1. Understanding the standard's requirements
2. Key areas requiring special attention
3. Identifying documentation requirements
4. Overview of Annex A
III. Information Security Management System compliant with the requirements of ISO 27001
1. Elements of the Information Security Management System according to ISO 27001
2. Exercises in interpreting and analysing the requirements of ISO 27001
IV. Audits – general information
1. Introduction to Audit
2. Conducting the full audit process
3. Audit criteria
4. Types of audits
V. Audit planning and preparation
1. Audit criteria and scope
2. Selection of the audit team
3. Process approach to internal audits
4. Key considerations when creating a control question list
5. Conducting an audit according to ISO 19011:2018
6. Practical exercises
VI. Conducting an audit – rules for conducting an on-site audit
1. Auditing techniques
2. Objective evidence
3. Identification of non-conformities and the ability to demonstrate them
4. Competencies of an effective auditor
5. Practical exercises
VII. Documenting audit results
1. Skillful formulation of inconsistencies
2. Documenting non-conformities
3. Identifying and documenting insights and potential for improvement
4. Summary of Audit Results – Audit Report
5. Practical exercises
VIII. Effective post-audit activities
1. Responsibilities related to the initiation of corrective actions
2. The Importance of Precisely Determining the Causes of Non-Conformity
3. Defining corrective actions
4. Evaluation of the effectiveness of actions
5. Post-audit activities in relation to insights and potentials for improvement
6. Practical exercises
IX. Discussion and summary
Requirements
Target Audience
- Professionals aiming for the role of Lead Auditor for ISO 27001:2023.
- Anyone with an interest in the subject matter.
Testimonials (1)
Speed of response and communication