ISO 27001:2013 ISMS Lead Auditor- KSA

Eligibility / Requirements

Before starting this course, students are expected to have the following prior knowledge:

a) Management systems

Understand the Plan-Do-Check-Act (PDCA) cycle

b) Information security management

Knowledge of the following information security management principles and concepts:
awareness of the need for information security;
the assignment of responsibility for information security;
incorporating management commitment and the interests of stakeholders;
enhancing societal values;
using the results of risk assessments to determine appropriate controls to
reach acceptable levels of risk;
incorporating security as an essential element of information networks and
systems;
the active prevention and detection of information security incidents;
ensuring a comprehensive approach to information security management;
continual reassessment of information security and making modifications as appropriate.

c) ISO/IEC 27001

Knowledge of the requirements of ISO/IEC 27001 (with ISO/IEC 27002) and the commonly used information security management terms and definitions, as given in ISO/IEC 27000, which may be gained by completing an IRCA certified ISMS Foundation Training course or equivalent.

Job roles this course is suitable for: