Course Outline
I. Information Security Management System Compliant with ISO 27001 Requirements
1. Key components of an ISMS aligned with ISO 27001
2. Exercises on interpreting and analyzing ISO 27001 requirements
II. Audits – General Overview
1. Comprehensive audit processes
2. Types of audits
III. Audit Planning and Preparation
1. Establishing audit criteria and scope
2. Selecting the auditor team
3. Applying a process approach to internal audits
4. Key considerations for developing control question lists
5. Practical exercises
IV. Conducting the Audit – Rules for On-Site Audits
1. Effective auditing techniques
2. Gathering objective evidence
3. Identifying and demonstrating non-conformities
4. Practical exercises
V. Documenting Audit Results
1. Skillfully formulating findings of inconsistency
2. Documenting non-conformities
3. Identifying and recording insights and improvement opportunities
4. Summary of Audit Results – The Audit Report
5. Practical exercises
VI. Effective Post-Audit Activities
1. Responsibilities for initiating corrective actions
2. The Importance of Accurately Determining Root Causes of Non-Conformity
3. Defining corrective actions
4. Evaluating the effectiveness of implemented actions
5. Post-audit activities related to insights and improvement potentials
6. Practical exercises
VII. Discussion and Summary
Requirements
Audience
- Individuals preparing for the role of ISO 27001:2023 Internal Auditor
- Anyone with an interest in the subject matter
