1

Information security management system (ISMS)

• Standards and regulatory frameworks.
• Fundamental principles of the information security management system.
• How an information security management system (ISMS) compliant with the ISO 27001 standard works.
• Leading an audit and an audit team.

2

Audit principles, preparation, and triggering

• Principles and fundamental concepts of an audit.
• Evidence-based approach to auditing.
• Interpreting the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Step 1 of the audit.
• Preparing for step 2 of the audit (on-site audit).
• Preparing for an ISO/IEC 27001 and triggering the audit.
• Conducting an ISO/IEC 27001 audit.
• Role of an auditor: Planning, directing, and tracking a management system audit with the ISO 19011 standard.

3

On-site auditing activities

• Step 2 of the audit.
• Communication during the audit.
• Auditing procedures.
• Writing audit testing plans.
• Writing audit findings and non-compliance reports.

4

Ending the audit

• Documenting the audit and reviewing the audit’s quality.
• Closing an ISO/IEC 27001 audit
• Assessment of action plans by the auditor.
• Advantages of the initial audit.
• Managing an internal audit program.
• Skills and assessment of auditors.

5

Certification

• Review. Tips for the exam.
• Contents of the exam, rules to follow. Standards or other documents provided to the candidates.
• Conditions in place to preserve the confidentiality of the copies.
• Minimum score needed to pass the written exam.
• The exam includes a multiple-choice questionnaire about the ISO/IEC 27001 standards.
• A participation certificate worth 31 CPD (Continuing Professional Development) credits is issued.