Duration
ISO/IEC 27001:2022 Lead Auditor Training
5 days
Overview
The course meets the training requirements of the International Register of Certificated Auditors (IRCA) for registration as an IRCA recognized QMS lead auditor and provides delegates with an in-depth knowledge and skills in auditing in order to carry out information security management system audits.
Objectives
After completing this training, the participants are able to:
- Explain the purpose and business benefits of an information security management system, of information security management systems standards, of management system audit and of third-party certification.
- Explain the role of an auditor to plan, conduct, report and follow up an information security management system audit in accordance with ISO 19011 (and ISO 17021 where appropriate.
- Plan, conduct, report and follow up an audit of an information security management system to establish conformity (or otherwise) with ISO/IEC 27001 (with ISO/IEC 27002) in accordance with ISO 19011.
Targe Audience
- Management Representatives/ Managers / Process owners
- Auditors / Lead Auditors and quality professionals
- ISO Coordinators
Day 1
Time
Agenda
Manual Section
08.00
08.30
About the Course
S01
10.15
10.50
Standards, principles and definitions
S02
10.50
11.00
Break
11.00
11.30
Annex SL
S03
11.30
12.00
Unified framework-High level structure
S04
12.00
12.30
ISMS History, Structure and Benefits
S05
12.30
13.00
Lunch Break
13.00
14:00
Case Study 1: ISMS and its context
CS1
14.00
15.00
Case Study 2: Exclusions
CS 2
15.00
15.15
Break
15.15
15.50
Risk Assessment and Information Security Risk Management
S 06
15.50
17.30
Case Study 3: Risk Assessment – 90 min
CS3
17.30
18.00
Instructions for the Evening Study
Day 2
Time
Agenda
Manual Section
09.00
09.40
Review of Day 1 and the Evening Study. Delegates take active part.
09.40
10.00
ISO 27002 and Control Objectives
S07
10.00
10.15
Stages of ISMS Development, ISO/IEC 27003, ISO/IEC 27004
S08
10.15
10.30
Break
10.30
12.30
Case Study 4: Selection of Controls and Statement of Applicability
CS 4
12.30
13.10
Lunch Break
13.10
13.45
ISMS and the Legal Compliance
S09
13.45
14.15
Information Security Incident Management ISO/IEC 27035:2011
S10
14.15
15.00
Accreditation, certification and types of audits
S11
15.00
15.15
Break
15.15
16.00
Audit Process and Planning
S12
16.00
17.30
Case Study 5: Document Review
CS 5
17.30
18.00
Instructions for the Evening Study
Day 3
Time
Agenda
Manual Section
09.00
09.40
Review of Day 2 and the Evening Study. Delegates take active part.
9.40
10.30
Case Study 6: Stage I Audit and Audit Plan
CS6
10.30
10.45
Break
10.45
11.00
Checklists
S13
11.00
11.15
Opening Meeting
S14
11.15
12.15
Case Study 7: Checklists
CS 7
12.15
12.45
Audit Techniques
S15
12.45
13.25
Lunch Break
13.25
14.25
Case Study 8: Opening Meeting
CS8
14.25
15.00
Raising NCRs
S16
15.00
15.15
Break
15.15
15.45
Audit Reporting and Follow Up
S17
15.45
17.15
Case Study 9: Raising NCRs
CS 9
17.15
17.30
Closing Meeting
S18
17.30
18.00
Instructions for the Evening Study
Day 4
Time
Agenda
Manual Section
09.00
09.40
Review of Day 3 and the Evening Study. Delegates take active part.
09.40
10.40
Case Study 10: Audit Interviews
CS 10
10.40
11.00
Break
11.00
11.45
Case Study 10: Audit Interviews (continuation)
CS 10
11.45
12.45
Case Study 11: Raising NCRs – Part 2
CS 11
12.45
13.30
Lunch Break
13.30
14.00
Case Study 11: Raising NCRs – Part 2 (presenting the results)
CS 11
14.00
16.10
Case Study 12: Team Meeting, (including 10 min Break)
CS 12
16.10
17.10
Study 13: Closing Meeting
CS 13
17.10
17.50
Case Study 14: Corrective Actions
CS 14
17.50
18.10
Instructions for the Evening Study
Day 5
Time
Agenda
Manual Section
09.00
09.40
Review of Day 4 and the Evening Study. Delegates take active part.
09.40
10.40
Case Study 15: Final Report
CS15
10.40
11.00
Break
11.00
11.30
Case Study 15: Final Report (continuation)
CS15
11.30
13.00
Case Study 16: Revision Quiz
CS 16
13.00
13.45
Lunch Break
13.45
14.30
Case Study 16: Revision Quiz (continuation)
CS 16
14.30
16.30
Exam
16.30
17.30
IRCA Registration and Feed Back Session
S19
Programme scope, delivery arrangements and suitability are confirmed during enquiry.