LEARNING OBJECTIVES

• Acknowledge the correlation between ISO/IEC 27001 and other standards and regulatory frameworks 
• Master the concepts, approaches, methods and techniques used for the implementation and effective management of an ISMS
• Learn how to interpret the ISO/IEC 27001 requirements in the specific context of an organization
• Learn how to support an organization to effectively plan, implement, manage, monitor and maintain an ISMS
• Acquire the expertise to advise an organization in implementing Information Security Management System best practices 

WHO SHOULD ATTEND ?

• Managers or consultants involved or concerned with Information Security Management System
• Expert advisors seeking to master the implementation of an Information Security Management System  
• Individuals responsible for maintaining conformance with ISMS requirements
• ISMS team members

Prerequisites

A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of implementation principles. 

COURSE OUTLINE

Module 1: Introduction to Information Security Management System ISMS concepts as required by ISO/IEC 27001

• Normative, regulatory and legal framework related to Quality
• Fundamental principles of Quality
• ISO/IEC 27001 certification process
• Information Security Management System ISMS
• Detailed presentation of the clauses 4 to 8 of ISO/IEC 27001

ย 

Module 2: Planning and Initiating an ISO/IEC 27001 audit

• Fundamental audit concepts and principles
• Audit approach based on evidence
• Preparation of an ISO/IEC 27001 certification audit
• ISMS documentation audit
• Conducting an opening meeting

ย 

Module 3: Conducting an ISO/IEC 27001 audit

• Communication during the audit
• Audit procedures: observation, document review, interview, sampling techniques, technical verification, corroboration and evaluation
• Audit test plans
• Formulation of audit findings
• Documenting of non conformities

ย 

Module 4: Concluding and ensuring the follow-up of an ISO/IEC 27001 audit

• Audit documentation
• Quality review
• Conducting a closing meeting and conclusion of an ISO/IEC 27001 audit
• Evaluation of corrective action plans
• ISO/IEC 27001 Surveillance audit
• ISO/IEC 27001 internal audit management programme

ย 

Module 5: Certification Exam

GENERAL INFORMATION

Educational approach

• This training is based on both theory and best practices used in the implementation of an ISMS
• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

• Certification fees are included in the exam price
• Training material containing over 400 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge