ISO 27001 Lead Auditor Course

Introduction to the course

Introduction & suggested reading

What is ISO 27001?

The structure of ISO 27001

Information security principles

Introduction to the Information Security Management System

Implementing ISO 27001 requirements

Implementing ISO 27001 as a project

Documenting ISO 27001 requirements

ISO 27001 Benefits

ISO 27001 Benefits – Real-life exercise

Related documentation

Certification FAQs

Recap quiz

Introduction & suggested reading

Understanding your organization and its context [clause 4.1]

Understanding the needs and expectations of interested parties [clause 4.2]

Determining the scope of the ISMS [clause 4.3]

Leadership and commitment [clause 5.1]

Information Security Policy [clause 5.2]

Organizational roles, responsibilities and authorities [clause 5.3]

Information security objectives [clause 6.2]

Resources [clause 7.1]

Competence [clause 7.2]

Awareness [clause 7.3]

Communication [clause 7.4]

Documented information [clause 7.5]

Related documentation

Recap quiz

Introduction & suggested reading

Addressing risks and opportunities [clause 6.1.1]

Risk management process [clause 6.1.2]

Information security risk assessment – Risk identification [clause 6.1.2]

Exercise: Information security risk assessment – Risk identification

Information security risk assessment – Risk analysis and evaluation [clause 6.1.2]

Information security risk treatment [clause 6.1.3]

Statement of Applicability [clause 6.1.3]

Risk treatment plan [clause 6.1.3]

Related documentation

Recap quiz

Introduction & suggested reading

Formulating the risk treatment plan [clause 6.1.3]

Implementing the risk treatment plan [clause 8.3]

Operational planning and control [clause 8.1]

Operating the ISMS [clause 8]

Managing outsourcing of operations [clause 8.1]

Controlling changes [clause 8.1]

Risk assessment review [clause 8.2]

Related documentation

Recap quiz

Introduction & suggested reading

Monitoring, measurement, analysis, and evaluation [clause 9.1]

Internal audit [clause 9.2]

Management review [clause 9.3]

Nonconformities and corrective actions [clause 10.2]

Continual improvement [clause 10.1]

Related documentation

Recap quiz

Introduction & suggested reading

Introduction to Annex A

People controls

Physical controls

Technological controls – overview and new controls

Technological controls – software development

Technological controls – operational security

Organizational controls – policies and responsibilities

Organizational controls – information and asset management

Organizational controls – operational security

Organizational controls – supplier security

Organizational controls – incidents and business continuity

Organizational controls – compliance, privacy, and legal aspects of security

Related documentation

Recap quiz

Introduction & suggested reading

Auditor assumptions

Techniques for finding evidence

Sampling the records

Interviewing techniques

The audit findings

Nonconformities

Observations

Internal vs. external audit

Annual audit program

Audit plan for an individual audit

Creation of the checklist

Internal audit report

Corrective action follow-up

Recording the evidence

Recap quiz

Introduction & suggested reading

What is certification?

Certification process

Certification of integrated management systems

Introduction to accreditation and ISO 17021

Competences of lead auditors required by ISO 17021-1

Introduction to International Accreditation Forum (IAF) documents

Introduction to ISO 19011

Principles of auditing

Recap quiz

Introduction & suggested reading

Audit Team Leader / Lead Auditor

Auditor

Technical Specialist

Certification Reviewer

Audit Client

Management Team

Auditee

Hosts / Guides

Recap quiz

Introduction & suggested reading

Audit criteria and objectives

Audit scope

Selecting audit methods

Sampling evidence in audits

Types of remote auditing techniques

Deciding when to use remote auditing techniques

Planning the use of remote auditing techniques

Selecting the audit team

Managing audit risks

Preparing the audit plan

Allocating audit activities to auditors

Making contact with the audit client

Preparation of audit resources

Recap quiz

Introduction & suggested reading

Opening meeting

Managing site visits

Interviews

Audit evidence requests

Debriefing sessions

Dealing with conflicts

Related documentation

Recap quiz

Introduction & suggested reading

The importance of managing your audit team

Communication with the team before the audit

Managing audit progress

Team meetings

Managing audit findings

Managing audit records

What to do when you hit problems

Evaluating your audit management

Recap quiz

Introduction & suggested reading

Audit findings

How to reach audit conclusions

Planning the closing meeting

Holding an effective closing meeting

Dealing with feedback at closing meetings

Effective audit report writing

Post-audit activities, corrections, and correction actions

Certification review process

Related documentation

Recap quiz

Instructions for taking the exam and obtaining the certificate