Information Security Management System Internal Auditor Training

virtual classes schedule

20th - 22nd Jan 2023: ISO 27001 Internal Auditor on Information Security Management System based on ISO/IEC 27001:2022 | Time: 9:30 am to 6:30 pm

*Note: if your preferred training dates are not visible, please reach out to us by filling the form

WHAT IS INFORMATION SECURITY MANAGEMENT SYSTEM?

ISO/IEC 27001:2022 international standard specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system within the context of the organisation. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organisation. 

Information being a valuable asset and a building block is a key to the growth of any organisation. Information needs to be suitably protected like any other important business asset. In the modern world, this asset becomes crucial for success and maintaining the credibility of the organisation. If this asset is compromised then the organisation may have to face various threats and risks like brand image erosion, business disruption, financial and productivity loss, etc. On the other side, information security also maximises return on investments, minimises business risks, and increases business opportunities.

Our training course is structured to provide an understanding of ISO/IEC 27001:2022 requirements blended with case studies, exercises, and role play where a participant will be equipped with the knowledge and skills which are needed to assess the Information Security Management System (ISMS) of an organisation.

YOUR BENEFITS

• Enhancement of skills and knowledge
• Will be enabled to provide valuable insights to the management with regards to ISMS
• Will be enabled to add value as an auditor by presenting audit findings that will help in improving the overall ISMS
• Enables you to improve your career prospects worldwide

COURSE CONTENT / OUTLINE

• Understanding the purpose of an Information Security Management System and the processes involved in establishing, implementing, maintaining and continually improving an ISMS
• Applying PDCA approach to information security management processes
• Understanding the role and skills required by an auditor to perform effective audits
• Understanding auditing concepts, auditing principles
• Understanding the competencies required for an auditor to perform audits
• Understanding the various methods of auditor evaluation
• Understanding the activities involved in the audit phases (i.e. planning, conducting, reporting and follow up) in accordance with ISO 19011

WHO SHOULD ATTEND?

• Internal auditors and professionals who are interested in assessing the information security management system framework within an organisation
• Personnel who want to pursue an auditing career in information security
• Project managers or consultants responsible for establishing, implementing, maintaining, auditing and improving Information Security Management Systems within an organisation
• Top Management (IT Head, CISO etc.) and Senior Managers responsible for the IT governance of an enterprise and the management of its risks

TRAINING DURATION

3 days

PREREQUISITES

Knowledge on awareness on ISMS would be an added advantage.

EXAM DETAILS

Candidates will be assessed through an objective based written examination (open book) at the end of the course. Exam duration is for 90 minutes. Minimum passing criteria is 60%.

CERTIFICATION

Candidates who scores 60% in the online examination will be issued a TÜV SÜD certificate. Unsuccessful candidates will be issued a certificate of attendance.