ISO/IEC 27001:2013 - Information Security Management Systems Auditor/Lead Auditor Training Course

IRCA certified course: 17279 - PR 320 This auditor/lead auditor course is designed to provide confidence to auditors in the development, conformance and effective implementation of processes and the continuous improvement of an ISMS based on ISO/IEC 27001.

Prior Knowledge Requirements:

Prior to attending this training course, learners must have knowledge of ISO/IEC 27001:2013 or acceptable equivalent standard and the following information security management principles and concepts:

• Managemnt Systems.
• Understand the Plan-Do-Check-Act (PDCA) cycle.
• Information Security Management.
• Knowledge of the following security management principles and concepts:
• Awareness of the need for information security.
• The assignment of responsibility for information security.
• Incorporating management committment and the interests of stakeholders.
• Enhancing societal values.
• Understanding the results of risk assessments to determine appropriate controls to reach acceptable levels of risk.
• Incorporating security as an essential element of information networks and systems; the active prevention and detection of information security incidents.
• Enduring a comprehensive approach to information security management.
• Continual reassessment of information security and making modifications as appropriate.

Objectives:

• Explain the purpose of an Information Security Management System (ISMS) and explain the processes involved in establishing, implementing, operating and monitoring, reviewing and improving an ISMS as defined in ISO 27001, including the significance of these for ISMS auditors
• Explain the purpose, content and interrelationship of ISO 27001 to other relevant standards and the legislative framework relevant to an ISMS
• Apply an in-depth knowledge of the ISO 27001 audit and certification process
• Have the skills and knowledge needed to conduct third party audits against the requirements of the ISO 27001 Information Security Management Systems and to report and follow-up the results