Hours
1
This programme is delivered online over 25 sessions of 90 mins each with Q&A .
Participants
1
This programme is available for a minimum batch size of 10 participants.
Start DATE
1
th
This programme starts on the 25th of every month.
- Our ISO courses are conducted by our experienced lead auditors, who have audited numerous organizations. The course is structured to provide the knowledge and skills required to assess the Information Security Management System of an organization with respect to the requirements of ISO 27001:2013 standard and our trainer will teach you how to lead, plan, execute and report on an ISMS internal/external audit in an organization assessing its conformance with ISO/IEC 27001:2013.
- To attend this course, you should have the knowledge of the key Plan-Do-Check-Act (PDCA) cycle and understanding of Information Security Management principles, concepts and the requirements of ISO/IEC 27001:2013.
- That is why we suggest all our participants to also attend ISMS foundation training.
What will I learn
- What is the purpose and business benefits of an ISMS, ISMS standards, ISMS audits and third party certification
- What is the role and skills required by an auditor when planning, conducting and reporting
- Following up on an ISMS audit in accordance with ISO/IEC 27001:2013, ISO/IEC 27002:2013, Information technology — Security techniques — Code of practice for information security controls, ISO 19011:2011,
- Guidelines for auditing management systems and where applicable, ISO 17021:2011, Conformity assessment – Requirements for bodies providing audit and certification of management systems
Pre Requisites
- The knowledge of the principles and concepts for information security management systems including awareness of the need for information security, responsibilities, management commitments, using results of risk assessments and incorporation security as an essential element of information networks and systems are just as recommended as the knowledge of the requirements of ISO/IEC 27001 and terms and definitions as given in ISO/IEC 27000. Additionally, the knowledge and understanding of the PDCA (Plan-Do-Check-Act) cycle will support a successful completion of the course.
- Knowledge of English is essential
Who should attend
- Auditors
- Professionals associated with Information Security team
- Quality professionals
- Project Managers
- IT expert advisors
- Chief Security Officers (CSOs)
- Chief Information Security Officers (CISOs)
- Chief Information Officers (CIOs)
Topics Covered
- Understanding the purpose and the processes involved in establishing, implementing, maintaining and continually improving an Information Security Management System (ISMS).
- Applying (Plan-Do-Check-Act) approach for ISMS processes
- A clear understanding of the role and skills required by a lead auditor
- Planning, conducting and reporting ISO 27001 audits in accordance with ISO 19011 using the standard auditing concepts and principles
- Prepare, lead and report on the findings of an ISMS audit, conducting second and third-party audits
- Audit risk assessments, business continuity and effective continual improvement for organizations
- Identifying nonconformities and ensuring appropriate corrective action is undertaken
Training Methodology
This is an online training program comprising live online classes, online content, recorded sessions, quizzes and tests.
Each Interactive Online Session will be for a maximum of 90 mins duration. The schedule will be worked out on a batch to batch basis.
Minimum batch size must be 10 Participants
Will involve active participation from the group
