Course Outline
I. Introduction to Information Security
1. Systemic management of information security
2. Organizational benefits and added value
II. Overview of ISO 27001 Requirements
1. Key requirements of the standard
2. Critical areas of focus
3. Identification of documentation obligations
4. Overview of Annex A controls
III. Information Security Management System (ISMS) Compliance with ISO 27001
1. Core components of an ISMS in accordance with ISO
27001
2. Exercises in interpreting and analyzing ISO 27001 requirements
IV. Audits – General Information
1. Audit fundamentals
2. Comprehensive audit processes
3. Audit criteria
4. Classification of audits
V. Audit Planning and Preparation
1. Defining audit criteria and scope
2. Selection of the audit team
3. Process-oriented approach to internal audits
4. Key considerations for developing control question lists
5. Conducting audits in accordance with ISO 19011:2018
6. Practical exercises
VI. Conducting an Audit – On-Site Procedures
1. Auditing methodologies
2. Objective evidence collection
3. Identification and verification of nonconformities
4. Competencies required for audit leadership
5. Practical exercises
VII. Documenting Audit Results
1. Effective formulation of findings
2. Documentation of nonconformities
3. Identification and recording of observations and improvement opportunities
4. Summary of Audit Results – Audit Report
5. Practical exercises
VIII. Post-Audit Activities
1. Responsibilities for initiating corrective actions
2. Importance of root cause analysis for nonconformities
3. Definition of corrective actions
4. Evaluation of action effectiveness
5. Post-audit follow-up on observations and improvement potentials
6. Practical exercises
IX. Discussion and Summary
This structured text outlines the ISO/IEC 27001 Lead Auditor certification pathway, formatted for web presentation without tables.
PECB ISO/IEC 27001 Auditor Certification Requirements
All applicants seeking PECB ISO/IEC 27001 Auditor credentials must pass the PECB Certified ISO/IEC 27001 Lead Auditor examination (or an approved equivalent) and adhere to the PECB Code of Ethics.
Eligibility for the four certification tiers is determined by the applicant’s professional experience and documented history of active management system audits:
1. Provisional Auditor
-
Credential Designation: PECB Certified ISO/IEC 27001 Provisional Auditor
-
Professional Experience: No experience required.
-
MS Audit/Assessment Experience: No experience required.
-
Ideal For: Professionals who have passed the examination but lack sufficient field experience to qualify for higher tiers.
2. Auditor
-
Credential Designation: PECB Certified ISO/IEC 27001 Auditor
-
Professional Experience: Two years of total experience, including at least one year dedicated to Information Security Management.
-
MS Audit/Assessment Experience: A minimum of 200 hours of documented audit activities.
3. Lead Auditor
-
Credential Designation: PECB Certified ISO/IEC 27001 Lead Auditor
-
Professional Experience: Five years of total experience, including at least two years dedicated to Information Security Management.
-
MS Audit/Assessment Experience: A minimum of 300 hours of documented audit activities.
4. Senior Lead Auditor
-
Credential Designation: PECB Certified ISO/IEC 27001 Senior Lead Auditor
-
Professional Experience: Ten years of total experience, including at least seven years dedicated to Information Security Management.
-
MS Audit/Assessment Experience: A minimum of 1,000 hours of documented audit activities.
Requirements
Intended Recipients
- Professionals preparing for certification as an ISO/IEC 27001:2023 Lead Auditor, for government agencies and private sector organizations alike.
- General stakeholders interested in information security governance standards.
Testimonials (1)
Speed of response and communication
