ISO 27001 ISMS Internal Auditor

Course Description

Conducting regular internal audit sessions on your information security management system (ISMS), whether the organization is adhering or certified with the ISO/IEC 27001, is crucial for the success of the ISMS. Not to mention that auditing the ISMS is a requirement of the standard.This two-day course begins with understanding the concept of Information Security Management, the requirements of ISO/IEC 27001:2013 certification standard, and its relation to the ISO 27000 series of standards for information security management, Also, where you will be taught how to manage the entire process – from planning, scheduling, conducting, and writing your internal audit report.This Internal Auditor course is based on the principles of ISO 19011:2011. It is designed for you to understand and conduct internal audit assessments of the ISO/IEC 27001:2013 certification standard.

At the end of this course participants should be able to:

• To gain and understanding of ISO 27001 ISMS requirements
• Prepare, conduct and follow up on ISMS audit activities
• Be able to evaluate and manage the security policies and practices of the organization

Course Outline

Session 1

• Introduction to information security management systems
• Objectives and benefits of an ISMS
• Fundamental concepts and principles of the ISMS
• Fundamental audit concepts and principles
• The ISMS Audit Planning
• The ISMS Audit Preparation

Session 2

• Conducting an ISMS Audit
• Recording the audit results
• Presenting reports
• Conducting Audit Follow-Up
• Preparing for Certification

Course Duration

• 2 days (4 hour online session per day )

Delivery Methodologies

• Instructor-led online lectures,
• Online quizzes

This course is recommended for

• Managers or executives responsible for the security and confidentiality of their business-critical information.
• Internal Auditor
• Information Security Personnel
• People who wish to understand and conduct internal audit assessments on the ISO/IEC 27001.