ISO/IEC ISMS 27001:2022 LEAD AUDITOR TRAINING COURSE

ABOUT THE COURSE

This CQI IRCA certified ISO 27001:2022 Information Security Management Systems Lead Auditor Course provides basic training for potential ISMS Lead Auditors with the knowledge and skills to prepare, conduct, report and follow up 1st, 2nd and 3rd party ISMS audits. The course meets the training requirements for auditor certification set by the Chartered Quality Institute and International Register of Certificated Auditors (CQI IRCA, www.quality.org) of the UK.

Duration: 5 - day course

WHAT WILL YOU LEARN FROM THE COURSE?

At the end of this course, students will gain sufficient knowledge and skills in the entire auditing process and get prepared as an ISMS professional.

Topics to be covered in this course include:

• General introduction;
• Information Security management principles, vocabulary and ISO 27001 requirements;
• Stage 1 audit (including document review);
• Audit planning;
• On-site auditing and audit skills;
• Writing NC reports and audit reporting; Audit follow up 

WHAT IS THE COURSE METHODOLOGY?

This classroom-based training is designed with a combination of tutorials, exercises and role-play.
Certificates will only be issued to participants with 100% full attendance.

WHO SHOULD TAKE THE COURSE?

This course is specially designed for:

• Members/supporting personnel of the Information Security Management Team who have responsibility to audit/implement/improve an information security management system;
• All ISMS auditors who wish to acquire an internationally recognized auditor status
• Any other personnel who wish to advance their career in management systems, irrespective of discipline

Prerequisite:

Students are expected to have prior knowledge on the following subjects:

• Management systems: Understand the Plan-Do-Check-Act (PDCA) cycle;
• Information security management principles and concepts: awareness of the need for information security; the assignment of responsibility for information security; incorporating management commitment and the interests of stakeholders; enhancing societal values; using the results of risk assessments to determine appropriate controls to reach acceptable levels of risk; incorporating security as an essential element of information networks and systems; the active prevention and detection of information security incidents; ensuring a comprehensive approach to information security management; continual reassessment of info. security and making of modifications as appropriate
• Knowledge on ISO/IEC 27001 requirements (and ISO/IEC 27002) may be gained by completing a CQI IRCA certified ISMS Foundation Training course or equivalent.

WHO IS THE COURSE ADVISOR?

The course content and structure are designed by the domain experts from TÜV SÜD.

With immense experience and knowledge in the relevant standards, our team of product specialists and technical experts at TÜV SÜD, developed the course content based on current business landscape and market requirements.