ISO 27001 Internal Auditor Training Course

ISO/IEC 27001, part of the growing ISO/IEC 27000 series of standards, is an information security management system (ISMS) standard published in October 2005 by the International Organization for Standardization (ISO) and the International E l e c t r o - technical Commission (IEC). Its full name is ISO/IEC 27001:2005 - Information technology —Security techniques—Information security management systems—Requirements but it is commonly known as "ISO 27001". Through various methods including group tasks, brainstorming, role plays and simulations, reflection exercises, and interactive participation by students, the course will enable the students to plan, develop and report an internal audit of part of the information security management system in accordance with ISO/IEC 27001 standard. The tutor will provide theoretical inputs where needed and emphasis will be on imparting applied knowledge in various situations, discussions of real-life examples, and students sharing their experiences with each other to enhance the learning experience. The course also provides an opportunity to the students for self-assessment of their understanding of the information security audit process and techniques through progress tests.

After the course the participant will be able to:

• Understand information security management definitions, concepts, and guidelines

• Understand the purpose of the ISO 27000 series

• Understand the requirements of the ISO 27001:2013 standard

• Understand the roles and responsibilities of the auditor

Learning Level: Advanced

Duration: 5day(s)

Introduction to information security management system management with ISO 27001

• Objectives and Course Structure

• Information Security Standard

• Certification Process

• Fundamental Principles of Information Security

• Information Security Management System

Audit initiation

• Fundamental Audit Concepts and Principles

• Evidence based Approach

• Audit Preparation

• Documentary Audit

• Preparing for the On-site Audit Activities

• Conducting On-site Activities

Conduct the audit

• Communication during the Audit

• Audit Procedures

• Drafting of Conclusions and Non-conformity Reports

Conclude the Audit

• Audit Documentation

• Review of the Audit Notes

• Audit Conclusions

• Managing an Audit Program

• The competence and Evaluation of Auditors

• Training Closure