ISMS ISO 27001:2022 Internal Auditor Training

OBJECTIVES

On successfully completing the course, delegates will be capable of performing effective internal audits of a company's information security management systems and reporting the outcome.

• an appreciation of the importance of controlling Information Security in all types of business activities;

• the ability to plan, conduct and report on a process based activity;

• an appreciation of Risk Analysis process;

• detailed review and interpretation of the main requirements of ISO.IEC 27001:2013;

• learn how to use Annexure A of ISO/IEC 27001:2013;

• an appreciation of documented management systems to control Information Security;

• evaluating corrective actions for root cause and effectiveness;

WHO THE COURSE IS FOR?

This course is not only a requirement for those who are to be used for internal information security audits, but also an essential course for Senior Management, Information Security Managers and Line Management

COURSE CONTENTS

• The Process Approach;

• Audit Management;

• Audit reporting, Planning and Preparation

• Problem Solving;

• Identifying non-conformances

• Detailed review of the requirements of ISO/IEC 27001:2013

• Information Security Management Issues- Documentation

• Exercises to reinforce skills learned in the course