Duration
3 days
Overview
This course explores the objectives of ISMS Audit and explains the roles and responsibilities of an Auditor to ensure the effectiveness of controls; and improvement of the management system in ISO/IEC 27001:2013.
Objective
This course is designed to develop practical skills and knowledge to conduct audits and improve the implementation of information management system in accordance of ISO/IEC 27001:2013.
Target Participants
- Information Security practitioner
- Auditors of any discipline
- ISMS Developers and Management
Agenda
Module 1: Introduction
- Audit Origins
- ISO/IEC 27001:2013 – 9.2: Internal Audit
Module 2: Control Objectives & ControlGroup Activity 1: Control Objectives & Control
- Assignment
- In-group discussion
- Groups presentation
Module 3: Audit Cycle
- Plan
- Execute
- Report
- Follow-up
Module 4: Audit Cycle (Plan)
- ISMS Audit Programme
- ISMS Audit Parameters
- Resources
- Audit Plan
Group Activity 2: Audit Plan
- Assignment
- In-group discussion
- Groups presentations
Module 5: Audit Cycle: Execute
- Opening Meeting
- Conduct the Audit
- Audit Findings
- Closing Meetings
Group Activity 3 (a): Nonconformity Statement
- Assignment
- In-group discussions
- Groups presentations
- Closing Meetings
Group Activity 3 (b): Conduct the Audit Role-play
- Assignment
- In-groups discussions
- Groups presentations
Module 6: Audit Cycle: Follow-up
- Conducting Audit Follow-up
Module 7: ISMS Certification
- Certification Process
- Engagement with Certification Body
- Preparation for Certification Audit
- 'To Do' Lists
Certification
The CISMSA examination is certified by the Global ACE Certification. The examination framework is designed to align with a set of relevant Knowledge, Skills and Attitudes (KSA) that are necessary for an Information Security Awareness Manager. Candidates will be tested via a combination of either continual assessment (CA), multiple choice (MC), theory/underpinning knowledge assessment (UK), practical assessment (PA), assignments (AS) and case studies (CS) as required.
Candidates can take the examination at authorized examination centres in participating member countries. Candidates who have successfully passed the CISMSA examination will be eligible to apply as an associate or professional member by fulfilling the membership criteria defined under the Global ACE Certification.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.