ISO 27001 Certification Courses

ISO 27001 Internal Auditor training will provide delegates with the skills needed to perform internal audits within an organisation using an ISO 27001 Information Security Management System. Attending this course will provide you with both Foundation and Internal Auditor level knowledge of ISO 27001 along with:

Course Outline

Module 1: Introduction to Auditing

• Defining Auditing
• Types of Audit
• Techniques and Principles
• Phases of Audit

Module 2: Performing ISO 27001 Audits

• Preparing Audit Reports
• Analysing Data
• Auditing Procedures
• Reviewing Documents and Reports
• Validating Reports
• Designing and Merging Findings
• Classifying Findings
• Planning, Organising, and Prioritising
• Factors that Affect the Reliability of Audit Findings

Module 3: Internal Auditor

• Roles and Responsibilities of an Internal Auditor
• Record Review Activities
• Internal Auditor Checklist
• Communication Between Departments
• Drafting Reports and Test Plans

Module 4: Risk Management

• Analysing and Evaluating Risks
• Managing Risk Approaches

Module 5: Risk Assessment and Statement of Applicability (SOA)

• Risk Assessment Summary
• Conducting Risk Assessments
• Risk Assessment Methodology
• Risk Assessment Implementation
• Risk Treatment Plan
• Risk Treatment Implementation
• ISMS Risk Assessment Report
• Statement of Applicability (SOA)
• Threats and Vulnerabilities

This ISO 27001 Lead Implementer training course will provide delegates with the ability to scale ISMS into an enterprise. You will learn how to boost information security in compliance with ISO 27001 standards. This ISO 27001 Lead Implementer training also covers concepts and topics from ISO 27001 Foundation and ISO 27001 Internal Auditor Training. 

Course Outline

Module 1: Roles and Responsibilities of a Lead Implementer

Module 2: Launch and Implement an ISMS in an Organisation

• Apply the Frameworks
• Design Writing Procedures and Controls
• Implementing Controls
• Training and Awareness Programme
• Management’s Role
• Impediments and Aids to Success
• Responsibilities of Employees

Module 3: Certification

• Certification Process - Organisations
• Steps to Certification
• Certification Audits
• Surveillance Visits
• Certification Process - Individuals
• Procedures
• Documentation
• Information Security Policies
• Monitoring and Reviewing within an Organisation

Module 4: Security Controls and Incident Management

• Management of Incidents and Operations
• Physical and Environmental Security
• Communications
• Managing Incidents
• Confidentiality and Security of Information in an ISMS
• Business Continuity Management (BCM)
• Control and Act
• Managing Records
• Monitoring Controls
• Indicating Performance
• Developing a Matrix According to ISO 27001
• Internal Auditing
• Improvement Programmes

This ISO 27001 Lead Auditor training course will provide delegates with the skills and abilities needed to audit ISO 27001 information security management systems. This ISO 27001 Lead Auditor training also covers concepts from ISO 27001 Foundation, ISO 27001 Internal Auditor, and ISO 27001 Lead Implementer Training. 

Course Outline

Module 1: Introduction to ISO 27001 Lead Auditor

• Qualifications of an Auditor
• IRCA Code of Conduct
• Difference between Conformance and Compliance

Module 2: Preparing and Planning an Audit

• Evaluation Methods
• Roles and Responsibility of an Auditor
• Auditing Schedule and Time
• Procedures and Process Flow
• Plans and Programs
• Activities of an Auditor
• Audit Checklists
• Internal Auditing Goals and Charter
• Audit Components
• Purpose and Extent of an Audit
• Confirming Audit Plans

Module 3: Reviewing Process and Qualities

• Inspection Writing
• Different Review Stages
• Auditing Approaches and Methods
• Data Analysis
• Collecting Evidence
• Taking Notes
• Observation
• Audit Findings
• Auditor Team Meetings
• Analysing Reports from Other Auditors
• Preventative and Corrective Actions
• Conducting Follow-ups

Module 4: Tasks of an Auditor

• Preparing Audit Plans and Checklists
• Defining Targets
• Monitoring and Logging
• Handling Stressful Situations
• Tips and Recommendations
• Intrusion and Penetration Testing
• Reporting Audits
• Follow-up Actions
• Auditing Results
• Submitting Reports to Higher Management
• Decision Making