Course Outline
I. Information Security Management System Compliant with ISO 27001 Requirements
1. Components of the Information Security Management System in Accordance with ISO 27001
2. Exercises in Interpreting and Analyzing ISO 27001 Requirements
II. Audits – General Information
1. Comprehensive Audit Process
2. Types of Audits
III. Audit Planning and Preparation
1. Audit Criteria and Scope
2. Selection of an Audit Team
3. Process-Oriented Approach to Internal Audits
4. Key Considerations for Developing a Control Question List
5. Practical Exercises
IV. Conducting an Audit – Guidelines for On-Site Auditing
1. Auditing Techniques
2. Objective Evidence Collection
3. Identification and Documentation of Non-Conformities
4. Practical Exercises
V. Documenting Audit Results
1. Effective Formulation of Inconsistencies
2. Documenting Non-Conformities
3. Identifying and Documenting Insights and Opportunities for Improvement
4. Summarizing Audit Findings – Audit Report Preparation
5. Practical Exercises
VI. Post-Audit Activities for Continuous Improvement
1. Responsibilities for Initiating Corrective Actions
2. Importance of Accurately Identifying the Causes of Non-Conformities
3. Defining and Implementing Corrective Measures
4. Evaluating the Effectiveness of Corrective Actions
5. Post-Audit Activities to Leverage Insights and Opportunities for Improvement
6. Practical Exercises
VII. Discussion and Summary
These modules are designed to provide a comprehensive framework for government agencies to enhance their information security management systems, ensuring alignment with public sector workflows, governance, and accountability.Requirements
Audience
- Individuals preparing for the role of Internal Auditor for ISO 27001:2023
- Any person with an interest in this subject matter, particularly for government and public sector applications
Testimonials (1)
Speed of response and communication
