ISO/IEC 27001 Lead Auditor («HSI»)

• Understanding the operations of an Information Security Management System based on ISO/IEC 27001 
• Acknowledging the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
• Understanding an auditor’s role: planning, leading and following up on a management system audit in accordance with ISO 19011
• Leading an audit and audit team
• Interpreting the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquiring the competencies of an auditor: planning an audit, leading an audit, drafting reports, and following up on an audit in compliance with ISO 19011

1. ^st Day: Introduction to Information Security Management Systems (ISMS) and ISO/IEC 27001
   • Course objectives and structure
   • Standards and regulatory frameworks
   • Certification process
   • Fundamental principles of Information Security
   • Management Systems
   • Information Security Management Systems (ISMS)
2. ^nd Day: Audit principles, preparation and launching of an audit
   • Fundamental audit concepts and principles
   • Evidence based audit approach
   • Initiating the audit
   • Stage 1 audit
   • Preparing the stage 2 audit (on-site audit)
   • Stage 2 audit (Part 1)
3. ^rd Day: On-site audit activities
   • Stage 2 audit (Part 2)
   • Communication during the audit
   • Audit procedures
   • Creating audit test plans
   • Drafting audit findings and non-conformity reports
4. ^th Day: Closing the audit
   • Documentation of the audit and the audit quality review
   • Closing the audit
   • Evaluating action plans by the auditor
   • Benefits of the initial audit
   • Managing an internal audit program
   • Competence and evaluation of auditors
   • Closing the training
5. ^th Day: Certification Exam

Consists of the following modules

• ISO/IEC 27001 Lead Auditor
• Exam ISO/IEC 27001 Lead Auditor

This training is based on both theory and best practices used in ISMS audits :

• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
• Managers or consultants seeking to master an Information Security Management System audit process
• Individuals responsible for maintaining conformance with Information Security Management System requirements
• Technical experts seeking to prepare for an Information Security Management System audit 
• Expert advisors in Information Security Management

A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles, equivalent to the training : 

Training material containing over 600 pages of information and practical examples will be distributed.

• Copy of the ISO 19011 standard
• Copy of the ISO 27001 standard