ISO 27001 Lead Auditor Training Course

I. Introduction to Information Security
1. Systemic management of information security.
2. Benefits and added value for the organization.

II. Overview of ISO 27001 Requirements
1. Key requirements of the standard.
2. Critical areas requiring special attention.
3. Identification of documentation needs.
4. Overview of Annex A.

III. Information Security Management System (ISMS) Aligned with ISO 27001
1. Core components of an ISMS according to ISO
27001.
2. Exercises in interpreting and analyzing ISO 27001 requirements.

IV. Audits – General Information
1. Introduction to auditing principles.
2. Comprehensive audit processes.
3. Audit criteria.
4. Types of audits.

V. Audit Planning and Preparation
1. Defining audit criteria and scope.
2. Selecting the auditor team.
3. Process approach to internal audits.
4. Key considerations when creating control question lists.
5. Conducting audits in accordance with ISO 19011:2018.
6. Practical exercises.

VI. Conducting an Audit – On-Site Rules
1. Auditing techniques.
2. Objective evidence.
3. Identifying and demonstrating non-conformities.
4. Competencies required for auditors.
5. Practical exercises.

VII. Documenting Audit Results
1. Skilled formulation of findings.
2. Documenting non-conformities.
3. Identifying and documenting insights and improvement opportunities.
4. Summary of Audit Results – Audit Report.
5. Practical exercises.

VIII. Effective Post-Audit Activities
1. Responsibilities related to initiating corrective actions.
2. The Importance of Precisely Determining the Causes of Non-Conformity.
3. Defining corrective actions.
4. Evaluating the effectiveness of implemented actions.
5. Post-audit activities regarding insights and improvement potentials.
6. Practical exercises.

IX. Discussion and Summary