Course Content

• • Introduction to ISO and Information Security

    • Overview of ISO standards and ISMS
    • Basics of information security and risk management

    ISO 27001:2022 Standards and Related Frameworks

    • Detailed study of ISO 27001:2022
    • Context of the organization and relevant ISO standards

    PDCA Cycle for ISMS Implementation

    • Understanding the Plan-Do-Check-Act (PDCA) model in ISMS
    • Applying PDCA to establish and maintain ISMS

    ISMS Core Requirements

    • Context of the organization
    • Leadership, planning, support, and operations
    • Performance evaluation and continual improvement

    Organizational, People, Physical, and Technological Controls

    • A5: Organizational controls, A6: People controls, A7: Physical controls
    • A8: Technological controls including IT security measures and network protection
    • Practical application of these controls in an ISMS environment

    Audit Principles and Fundamentals

    • Principles of auditing in line with ISO 19011
    • Key auditing concepts, objectives, and communication skills

    Audit Planning and Preparation

    • Initiating the audit process, audit scope, objectives, and resources
    • Preparing the audit program and checklist

    Conducting Audits (Stage 1 and Stage 2)

    • Detailed breakdown of Stage 1 and Stage 2 audit processes
    • Evidence collection, interviewing techniques, and audit sampling

    Reporting and Concluding Audits

    • Developing audit findings and recommendations
    • Communicating audit conclusions and corrective actions

    Certification Preparation and Interview Techniques

    • Preparation for ISO 27001 Lead Auditor certification exams
    • Scenario-based interview questions, resume building, and mock exams