Information Security Management System Auditor/Lead Auditor Training Course as per ISO 27001:2022

A full week course designed to provide participants with the knowledge and skills required to perform first, second-and third-party audits of information security management systems.

The aim of this course is to provide students with the knowledge and skills required to perform first, second and third-party audits of information security management systems against ISO/IEC 27001:2022 (with ISO/IEC 27002), in accordance with ISO 19011 and ISO 17021, as applicable.

This course has been registered and certificated by the CQI IRCA Governing Body and satisfies the formal training requirements for individuals seeking registration under CQI IRCA or other auditor certification schemes.

Participant evaluation is through continuous assessment during the training course and an examination (2 hours) at the end of the course. A ‘Certificate of Achievement’ will be awarded to participants who passes both continuous assessment and the written examination.

Objective

Upon successful completion of the course, attendees will have the knowledge and skills to:

  • Explain the purpose and business benefits of an information security management system standards, management system audits and of third-party certification.
  • Explain the role of an auditor to plan, conduct, report and follow up an information security management system audit and or establish conformity (or otherwise) with ISO/IEC 27001:2022 (and ISO/IEC 27002) in accordance with ISO 19011 and ISO 17021 where appropriate.

Pre-requisites

For successful completion of this course, it is expected that you have prior knowledge of the following management principles and concepts:

  • The PDCA cycle
  • Information management system
  • Knowledge of the requirements of ISO 27001:2022 and the commonly used Information security management system terms and definitions, as given in ISO 27000, which may be gained by completing a foundation training course in ISO 27001:2022.

Audience

This course is recommended for anyone who is planning to perform internal audits/preparing to become an external auditor of Information security management systems. Training can be done in classroom or online. For the online exams a LAN connection and webcam are required.


All our public courses can also be delivered in-house at your premises either as standard or tailored depending on the needs and requirements of your business.

To find out which training courses we offer in your country, click on "Find a local course", select your country and navigate to Information security and service; or Contact us if you are interested or want to know more on in-house courses.

The aim of this course is to provide students with the knowledge and skills required to perform first, second and third-party audits of information security management systems against ISO/IEC 27001:2022 (with ISO/IEC 27002), in accordance with ISO 19011 and ISO 17021, as applicable.

This course has been registered and certificated by the CQI IRCA Governing Body and satisfies the formal training requirements for individuals seeking registration under CQI IRCA or other auditor certification schemes.

Participant evaluation is through continuous assessment during the training course and an examination (2 hours) at the end of the course. A ‘Certificate of Achievement’ will be awarded to participants who passes both continuous assessment and the written examination.

Objective

Upon successful completion of the course, attendees will have the knowledge and skills to:

  • Explain the purpose and business benefits of an information security management system standards, management system audits and of third-party certification.
  • Explain the role of an auditor to plan, conduct, report and follow up an information security management system audit and or establish conformity (or otherwise) with ISO/IEC 27001:2022 (and ISO/IEC 27002) in accordance with ISO 19011 and ISO 17021 where appropriate.

Pre-requisites

For successful completion of this course, it is expected that you have prior knowledge of the following management principles and concepts:

  • The PDCA cycle
  • Information management system
  • Knowledge of the requirements of ISO 27001:2022 and the commonly used Information security management system terms and definitions, as given in ISO 27000, which may be gained by completing a foundation training course in ISO 27001:2022.

Audience

This course is recommended for anyone who is planning to perform internal audits/preparing to become an external auditor of Information security management systems. Training can be done in classroom or online. For the online exams a LAN connection and webcam are required.


All our public courses can also be delivered in-house at your premises either as standard or tailored depending on the needs and requirements of your business.

To find out which training courses we offer in your country, click on "Find a local course", select your country and navigate to Information security and service; or Contact us if you are interested or want to know more on in-house courses.

Management Systems Training

 

Training methodology and benefits

DNV’s training blends auditor expertise, data analysis and LMS (Learning Management System) accessibility.

 

APQP4Wind Training

APQP4Wind is the common frame of reference to be used in the industry to strengthen the cooperation between manufacturers and suppliers

 

Automotive and aerospace training

Ensuring quality and safety in every part of the supply chain is vital for the automotive and aerospace industries

 

Environment and energy training

Public concern on environment and energy issues, stricter environmental legislation and increased media attention put more demands on businesses today

 

Food safety training

The food and beverage industry is moving to satisfy demands from international consumers and to open new market opportunities

 

Health and safety training

Your company is expected to care for its employees by managing safety and health in a professional way

 

Healthcare training

Every patient and service user across the globe should get the best care possible

 

Information security and IT service management training

Information is a vital asset for any company, but which also harbours special obligations

 

Medical devices training

Production of medical devices is a strictly regulated business. In almost all countries, and for most medical products, there are requirements and standards to which manufacturers need to show compliance

 

Quality & performance training

An effective quality management system in place can improve your company’s quality processes and overall performance and success

 

Risk management and business continuity training

The purpose of risk management is not to eliminate risk, but to understand it so that you can take advantage of the upside and minimize the downside

 

Social responsibility training

Ensuring your commitment to safeguard human rights and operate in an ethical, responsible manner is essential to instill ethical practices and promote a culture of corporate sustainability