News

About the course:

This course offered publicly, on site or on line will give all participants a general understanding of the ISO 27001:2022 information security management standard along with activities involved in auditing an information security management system including preparing, performing, reporting & follow up of audit findings.  Through presentations, group discussions and exercises, all participants will lean how to comfortably carry out effective internal audits of an information security management system to continually improve the systems effectiveness and to enhance information security performance

Overall Course Objectives:

• To provide an introduction to the International Organization of Standardization (ISO).
• To provide a basic understanding of the Process Approach and P-D-C-A Methodology.
• To provide a basic understanding of Risk Based Thinking involving the identification of information security risks and the development of an information security risk treatment plan.
• To provide a basic understanding on the preparation of a Statement of Applicability including the necessary controls from ANNEX A of the standard.
• To provide a clear interpretation of the ISO 27001:2022 standard requirements.
• To provide a clear understanding of conducting ISMS internal audits in accordance with the ISO 19011:2018 standard requirements.
• To explain and demonstrate the techniques involved in planning, preparing, performing, reporting and follow-up of ISMS internal audits.
• To give course participants sufficient basic training to be able to:
  • develop, implement, and effectively maintain an ISMS audit program
  • participate in ISMS auditing
  • effectively document audit results

Pre-Requisite Requirements:

All participants should have somewhat of an understanding of the requirements of the ISO 27001:2013 standard or past revisions (e.g.: ISO/IEC 27002:2005).                                                                                                

**Please note: These requirements are only suggested, however, not necessary!

Course Documentation:

All participants will receive a complete ISO 27001:2022 Internal Auditor course training manual and, upon successful completion, receive a Certificate of Achievement in ISO 27001:2022 Information Security Management Systems Auditing.

Course Dates:

**Please Note:  All dates above are tentative upon receipt of course confirmation from ISO Atlantic Consulting Inc.

Questions? Click here