Duration
2 days
Overview
As internationally recognized best practice for an information security management system (ISMS), ISO/IEC 27001 helps organizations to build resilience and protect information. So it’s no surprise that companies invest in training their people to get the knowledge and skills to use ISO/IEC 27001 to secure their business.
If you’re new to auditing and already have a thorough understanding of ISO/IEC 27001 then this training is for you. This packed two-day course will enable you to carry out an ISO/IEC 27001 internal audit and give you the vital skills to produce and distribute audit reports. Our highly experienced tutors will make sure that you walk away with the confidence to perform effective ISO/IEC 27001 audits to help your organization to continually improve.
The course is structured to optimize your learning using our unique accelerated approach, which blends practical activities, group discussions and classroom learning.
Course Agenda
Day 1
- Background to Information Security Management Systems (ISMS)
- ISO/IEC 27001: structure, auditing areas, terms and definitions
- Management system and ISMS auditing
- Auditor competence, responsibilities and characteristics
- Audit evidence triangle
- Types of audit
- Audit activities
- Creating an audit plan
- Checklists
- Audit questioning techniques: communication and interpersonal skills
- Conducting the opening meeting
- Conducting an audit
Day 2
- Work documents
- Nonconformities
- Documenting nonconformities
- Creating the audit report: prepare, approve and distribute
- Conducting audit follow-up activities
- Course review and questions
- Reflection and feedback
Programme scope, delivery arrangements and suitability are confirmed during enquiry.