ISMSIA Course Outline

You need this course if;

  • You need to perform internal audits of your Information Security Management (ISMS)
  • You are an experienced Auditor extending your role into information security
  • You are an Information Security Practitioner looking for audit training

You will learn;

  • An overview of the structure and content of ISOilEC 27001
  • The contribution internal ISMS audits can make to the effectiveness of your management system
  • How to establish an effective internal audit system which conforms with ISO/IEC 27001
  • The roles and responsibilities of an internal ISMS auditor
  • How to plan your audits by developing effective checklists
  • How to verify that current practice in your organisation conforms with defined requirements
  • That auditing for conformity can improve the stability and robustness of management systems
  • To gather objective evidence through observation, interviewing and sampling of documentation
  • To report findings accurately
  • What corrective action is and who is responsible for taking action
  • How to follow up and verify the effectiveness of corrective action taken

You will need;

  • To be familiar with the types of data held by your organisation and the methods used to store and process this data
  • A basic understanding of management system frameworks
  • Ideally to have taken our Introduction to ISO 27001:2013 Requirements course

Your future development;

  • Tutored Audits (coached live audit at your company)
  • ISO 27001 Auditor/Lead Auditor
  • See our Business Improvement courses

Virtual Course length

  • 2 days