ISO 27001 Internal Auditor

This 2 day course aims to give delegates the skills and knowledge to be able to audit information security management systems that meet the requirements of ISO 27001

Course Overview

This 2 day course aims to give delegates the skills and knowledge to be able to audit information security management systems that meet the requirements of ISO 27001

Who Should Attend

This course is ideal for anyone who is involved in the implementation or auditing of information security management systems within an organisation.

Course Objectives

The ISO 27001 Internal Auditor course aims to teach all the key topics:

• The requirements and benefits of ISO 27001 certification
• The documentation requirements of ISO 27001
• The relationship between ISO/IEC 17799 & ISO 27001
• How to write a Statement of Applicability (SOA) and a Risk Treatment Plan
• The audit process utilising a Risk Treatment Plan
• The control objectives and the documents required by Annex A
• The requirements of the Data Protection Act

The ISO 27001 Internal Auditor Course will teach the key concepts:

• Audit reporting
• Overview of Information Security
• Explanation of how an Information Security Management System can help your business
• Overview of the requirements and the benefits of ISO 27001
• Implementation of an ISMS
• Identifying and evaluating assets and their vulnerabilities, risk assessment
• Annex A, control objectives, risk treatment plan & statement of applicability
• Process approach to auditing
• Audit planning
• Auditing against a standard
• Scripted audit
• Audit exercise