ISO 27001 Lead Auditor
ISO/IEC 27001 Lead Auditor
ISO/IEC 27001 Lead Auditor training enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognized audit principles, procedures and techniques.Why should you attend?
During this training course, you will acquire the knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process. Based on practical exercises, you will be able to master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution. After acquiring the necessary expertise to perform this audit, you can sit for the exam and apply for a “Certified ISO/IEC 27001 Lead Auditor” credential. By holding a Lead Auditor Certificate, you will demonstrate that you have the capabilities and competencies to audit organizations based on best practices.Course Objectives
By the end of this training course, the participants will be able to: 1. Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001 2. Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor 3. Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and principles 4. Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing 5. Manage an ISO/IEC 27001 audit program 6. Improve your knowledge of auditing techniques 7. Learn how to lead audit teams
Target Audience
- Auditors seeking to perform and lead information security management system (ISMS) audits
- Managers or consultants seeking to master the information security management system audit process
- Individuals responsible to maintain conformity with the ISMS requirements in an organization
- Technical experts seeking to prepare for the information security management system audit
- Expert advisors in information security management
- Experienced consultants/auditors needing proof of their competence as ISO 27001 lead auditors
- Chief Information Security Officers needing to prepare for an ISMS audit
Course Pre-Requisites
- This training is based on both theory and best practices used in ISMS audits
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on a case study which includes role playing and discussions
- Practice tests are similar to the Certification Exam
Course Summary
Course Fee
৳ 15,000
Training Method
Offline/Online
Total Modules
5
Course Duration
32 Hours
Total Session
17
Class Duration
2 Hours
Details Course Outlines
Module-01
Introduction to the information security management system (ISMS) and ISO/IEC 27001
- Training course objectives and structure
- Standards and regulatory frameworks
- Certification process
- Fundamental concepts and principles of information security
- Information security management system (ISMS)
- Information security management system (ISMS)
Module-02
Audit principles, preparation, and initiation of an audit
- Fundamental audit concepts and principles
- The impact of trends and technology in auditing
- Evidence-based auditing
- Risk-based auditing
- Initiation of the audit process
- Stage 1 audit
Module-03
On-site audit activities
- Preparing for stage 2 audit
- Stage 2 audit
- Communication during the audit
- Audit procedures
- Creating audit test plans
Module-04
Closing the audit
- Drafting audit findings and nonconformity reports
- Audit documentation and quality review
- Closing of the audit
- Evaluation of action plans by the auditor
- Beyond the initial audit
- Managing an internal audit program
- Closing of the training course
Module-05
Mock Test
- Preparation for the Examination and Mock Test