- Duration / Course length: Upto 40 Hours
- Timings: Weekends
Course details
CQI-IRCA Certified ISO 27001:2013 Information Security Management System Lead Auditor Course
An Information Security Management System (ISMS) is a management system based on a systematic business risk approach, to establish, implement, operate, monitor, review, maintain, and improve information security. It is an organizational approach to information security. ISO/IEC 27001 is a standard for information security that focuses on an organization’s ISMS.
CQI and IRCA Certified ISMS Auditor Training courses will equip the delegates with the knowledge and skills to assess organization’s information security management systems to
ISO 27001.
Learning Outcomes
- Understand the application of the information security Management System in the context of ISO 27001
- Understand the relationship between an Information Security Management System, including Risk Management, controls and compliance with the requirements of different stakeholders of the organization.
- Improve the ability to analyze the internal and external environment of an organization, risk assessment and audit decision making in the context of an ISMS.
Who should attend?
This course is for those intending to acquire the competence to audit an organisation's ISMS to meet the requirements of ISO 27001, either as a third or second-party auditor. Successful completion of this course meets the requirement for certification as an Auditor on IRCA's ISMS Scheme.
Course Agenda
Day 1: Introduction to the management of an Information Security Management System based on ISO 27001
- Normative and regulatory and legal framework related to information security
- Fundamental principles in Information Security
- ISO 27001 certification process
- Information Security Management System (ISMS)
- Detailed presentation of the clauses 4 to 8 of the ISO 27001 standard
Day 2: Launching an ISO 27001 audit
- Fundamental audit concepts and principles
- Audit approach based on evidence and on risk
- Preparation of an ISO 27001 certification audit
- Documenting of an ISMS audit
- Conducting an opening meeting
Day 3: Conducting an ISO 27001 audit
- Communication during the audit
- Audit procedures:
- Observation,
- Document review
- Interview
- Sampling techniques
- Technical verification
- Corroboration and evaluation
- Drafting test plans
- Formulation of audit findings
- Drafting of nonconformity reports
Day 4: Closing an ISO 27001 audit
- Audit documentation
- Quality review
- Review of audit notes
- Conducting a closing meeting and conclusion of an ISO 27001 audit
- Evaluation of corrective action plans
Day 5: Surveillance Audit
- Surveillance audit
- Audit management program
- Completion of training
- Course review
- Exam preparation
- IRCA Certificate exam
Eligibility / Requirements
This course is for those intending to acquire the competence to audit an organisation's ISMS to meet the requirements of ISO 27001, either as a third or second-party auditor. Successful completion of this course meets the requirement for certification as an Auditor on IRCA's ISMS Scheme.
Job roles this course is suitable for:
Information Security Systems Engineer , Business Information Security Officer , Global Information Security , IT ManagerAbout Professional Training and Consultancy Services
Professional Training and Consultancy Services (PTCS) is a leading training and ISO consultancy company based in Dubai, United Arab Emirates. We specialize in delivering world-class ISO certification services and professional development training for individuals and organizations.
With a team of highly experienced trainers and consultants, PTCS takes a hands-on, end-to-end approach to ensure our clients receive practical, results-driven support. Our services include training, consulting, and implementation for globally recognized ISO standards such as ISO 9001, 14001, 45001, 22000, 27001, 31000, 20000, and 50001, along with professional certification courses like PMP, CISSP, CISM, and CISA.
We are committed to building trust, delivering excellence, and providing timely, value-added solutions to help our clients achieve compliance and competitive advantage.
See all Professional Training and Consultancy Services coursesEnquire about this course
You may add more courses here,
your list will be saved.
