ISO 27001 - ISMS Internal Auditor

Objectives

To give an understanding of:

• The ISO 27001 standard and its documentation requirements
• Risk assessment
• The relationship between ISO/IEC 17799:2000 & ISO 27001:2005
• The control objectives in ‘Annex A'.
• A Statement of Applicability and a Risk Treatment Plan
• The audit process utilising a Risk Treatment Plan

Course Content

A one day course containing the following:

• Process approach to auditing
• Audit planning
• Auditing against a standard
• Scripted audit
• Audit exercise
• Audit reporting

Who Should Attend

This course is designed for auditors, prospective auditors and managers of Information Security Management Systems.

What Should Have Been Learnt

• How to plan internal audits of an ISMS
• How to carry out internal audits of an ISMS
• How to produce a reports of internal audits of an ISMS
• Additional tools required by an internal auditor of an ISMS.

Prerequisites

Delegates are assumed to have sound knowledge of the topics covered in the one day ISMS Awareness and Application Course.