CQI/IRCA Registered ISO 27001:2022 Auditor/Lead Auditor Course

This is CQI/IRCA approved course on ISMS – ISO 27001:2022 Lead Auditor Training (IRCA Course No.2586). This course is designed in accordance with ISO 19011, ISO 27006 and ISO/IEC 17021. The course includes understanding the elements of ISO 27001:2022 Information Security Management System coupled with a practical approach to plan, effectively conduct and report first party, second party and third party audits of ISMS which helps organizations to achieve their ISMS objectives and improve overall ISMS performance. The course focuses on imparting knowledge and developing skills in conducting audits of ISMS effectively and independently as a team leader.

• Individuals interested in becoming IRCA certified Auditors/Lead Auditors for Information Security Management System (ISMS)
• Individuals wishing to implement ISMS based on requirements of ISO 27001:2013 in their organization
• Individuals responsible for managing the audit programs in their organization
• Information security managers/team leads
• Management representatives and/or departmental/functional information security coordinators
• Existing ISMS internal auditors
• Consultants of Information Security Management System

• Course Introduction
• Relevant standards, ISO/IEC 27001:2013, ISO/IEC 17799:2005, ISO/IEC TR 13335 part 3 and part 4, ISO 19011
• The importance of information security
• Assessing security threats and vulnerabilities
• Management of information security risks
• Selecting security controls
• Developing Information Security Management System (ISMS)
• Introduction to auditing ISMS
• ISO/IEC 27001:2013 auditing techniques
• Managing and leading a ISO/IEC 27001:2013 audit team
• Interview techniques
• Recording & Reporting Non Conformities
• Audit reporting
• Corrective Action & Audit Close out process
• Continuous Assessment exercises & feedback
• Syndicate & role play exercises & feedback
• Written Examination
• Sum-up

• The knowledge of the principles and concepts for information security management systems including awareness of the need for information security, responsibilities, management commitments, using results of risk assessments and incorporation security as an essential element of information networks and systems are just as recommended as the knowledge of the requirements of ISO/IEC 27001 and terms and definitions as given in ISO/IEC 27000. Additionally, the knowledge and understanding of the PDCA cycle will support a successful completion of the course.
• Knowledge of English is essential.

Certificate of successful completion shall be issued to all the delegates who attend entire duration of the course & pass the written examination. Certificate of attendance shall be issued to those who do not pass the written examination.

5 Days