It is essential that personnel involved in the development, implementation, and auditing of Information Security Management Systems (ISMS) understand and can audit against standards such as ISO 27001:2022.
IQC (Irish Quality Centre) trained auditors learn how to conduct Internal audits in a professional, thorough, effective, and fair manner against relevant standards.
This intensive 2-day accredited course will teach good auditing practice that reflects best in class.
Learn how to perform internal audits of Information Security Management Systems. On completion of the examination and continuous assessment delegates will receive a certificate of achievement accredited by IQC.
Who should attend?
IT Department Personnel. Security and quality professionals, existing information security auditors who wish to expand their auditing skills. Existing Lead Auditors / Internal auditors.
Anyone responsible for or aspiring to conduct internal Information Security Management Systems audits.
Course Objectives:
- On completion of this course, you will be able to:
- Explain the purpose, content and interrelationship of ISO 9000, ISO 27001, and ISO 19011.
- Interpret requirements of ISO 27001 in the context of an audit.
- Describe the roles and responsibilities of internal auditors.
- Plan and conduct an audit in accordance with ISO 19011 and ISO 27001.
- Gather objective evidence, through effective interviewing, observation, sampling and note taking.
- Analyse and interpret information to determine effectiveness, conformance with requirements and areas for improvement.
- Report the audit, including writing valid, factual, and value-adding non-conformity reports.
- Support audit follow-up activities, including evaluating the effectiveness of corrective action.
Course Itinerary (Summary)
- Fundamentals of Information Security Management Systems (ISMS)
- Using Process Management to manage and improve the business.
- Audit preparation and looking at the critical success factors for your organisation.
- Understanding the organisation and its key processes.
- Using Checklists.
- Participants conduct either a live audit in an organisation or a case study based virtual audit.
- Conducting the audit.
- Objective Evidence.
- Audit findings and Classification.
- Writing the Audit Report.
- Corrective action and effectiveness.
Prerequisites
Please note that participants attending the Lead Auditor course should have knowledge of Information Security Management Systems (ISMS) principles and concepts.
IQC will provide a “Pre-course” pack to all delegates approximately 10 days before the training commences.
If you are new to Information Security Management Systems (ISMS) you should consider fundamentals training. Please contact [email protected] to enquire about this training.
Need a quote for In-house Training email us today [email protected]