Audit an ISMS effectively in accordance with ISO/IEC 27001
The ISO/IEC 27001 Lead Auditor training course enables you to acquire the skills required to assess the conformity of an Information Security Management System (ISMS) with the requirements of ISO/IEC 27001.
It provides a structured approach to auditing, enabling you to prepare, conduct and close ISMS audits, as well as manage an audit programme in accordance with recognized auditing principles and best practices.
Who is this training for?
This training course is particularly suitable for:
- Auditors wishing to conduct or lead ISMS certification audits
- Managers or consultants wishing to master the ISMS audit process
- Managers responsible for maintaining compliance with ISO/IEC 27001 requirements
- Technical experts preparing for information security audits
- Consultants and advisers specializing in information security management
What you will learn
By the end of the training, you will be able to:
- Understand the fundamental concepts and principles of an ISMS based on ISO/IEC 27001
- Interpret the requirements of ISO/IEC 27001 from an auditor’s perspective
- Assess the conformity of an ISMS with the requirements of the standard
- Plan and prepare an ISO/IEC 27001 audit
- Conduct an audit and collect audit evidence
- Identify and document audit findings and nonconformities
- Close an audit and follow up on corrective actions
- Manage an ISO/IEC 27001 audit programme
Programme
Part 1 — Introduction to ISMS and ISO/IEC 27001
Overview of the fundamental principles of ISO/IEC 27001, the operation of an Information Security Management System and the certification process, with an audit-oriented approach.
Part 2 — Audit principles, preparation and initiation of an audit
Fundamental audit principles, definition of audit objectives, scope and criteria, evidence- and risk-based approaches, and preparation and initiation of an ISO/IEC 27001 audit.
Part 3 — Audit activities
Conducting audit activities, communicating with stakeholders, conducting interviews, reviewing documentation, collecting and evaluating audit evidence, applying sampling techniques and formulating audit findings.
Part 4 — Audit closure and follow-up
Drafting findings and nonconformity reports, closing the audit, evaluating corrective action plans, conducting follow-up activities and managing an ISO/IEC 27001 audit programme.
Exam and certification
Upon completion of the training course, you will be able to take the PECB Certified ISO/IEC 27001 Lead Auditor exam.
The exam lasts 3 hours and covers seven competency domains, ranging from the fundamental principles of ISMS and auditing to the preparation, conduct and closure of an audit, as well as the management of an ISO/IEC 27001 audit programme.
The exam and certification fees are included in the training price. In the event of failure, PECB provides one free retake within 12 months of the first exam.
After passing the exam, the PECB certification level you can obtain depends on your professional experience and audit experience. The full PECB Certified ISO/IEC 27001 Lead Auditor certification notably requires five years of professional experience, including two years in information security management, as well as 300 hours of audit activities.
Official PECB documentation
Consult the official PECB brochure to learn more about the training objectives, programme, exam arrangements and certification information.
Download the official PECB brochure (PDF)
What’s next?
This training course provides an excellent foundation for progressing to more advanced courses, including:
- ISO/IEC 27001 Lead Implementer
- ISO/IEC 27005 Risk Manager
- ISACA CISA
