ISO 27001:2013 Lead Auditor Course (IRCA Regd.)

TÜV NORD is a well-established and reliable partner for inspection and certification services throughout the world.

With more than 1,200 experienced experts, our pool of auditors guarantees the highest level of competence in the certification of management systems, products
and personnel.

Learning objectives:

The aim of this course is to provide delegates with the knowledge and skills required to perform first, second and third-party audits of information security management systems against ISO/IEC 27001 (with ISO/IEC 27002), in accordance with ISO 19011 and ISO 17021, as applicable. In detail the course will provide students with the basis to become a competent Lead Auditor,

Successful completion of the course (including examination) will result in issuance of a certificate which may be used to support an application to become registered as an IRCA auditor. Being certified as an IRCA auditor is a clear statement that you are a recognized, qualified and capable auditing professional.

Recommended prior knowledge:

The knowledge of the principles and concepts for information security management systems including awareness of the need for information security, responsibilities, management commitments, using results of risk assessments and incorporation security as an essential element of information networks and systems are just as recommended as the knowledge of the requirements of ISO/IEC 27001 and terms and definitions as given in ISO/IEC 27000. Additionally
the knowledge and understanding of the PDCA cycle will support a successful completion of the course.

Group of participants:

All those who require detailed knowledge of ISMS auditing processes are welcome. Management system consultants, management involved in ISO/IEC 27001 implementation and maintenance, personnel working with regulatory authorities, personnel carrying out 1st, 2nd and 3rd party audits and all those who require a detailed knowledge of the ISMS audit process. The number of participants is limited to max. 20 people.

Duration:

Five days with concluding examination

Location:

Business hotels, training centers or customers’ premises if required

Course instructor:

Professional lecturers from TÜV NORD or appointed partner organization

Outline:

• Purpose and benefits of an information security management system
• Role of an auditor to plan, conduct, report and follow up an information security management system audit
• Plan, conduct, report and follow up an audit of an information security management system to establish conformity (or otherwise) with ISO/IEC 27001 via exercises and role play
• Generating Audit Findings
• Plan-Do-Check-Act framework
• Differences between first-party, second-party and third-party certification audit
• Benefits of third-party accredited certification
• Terminology defined in the standard
• Requirements for ISMS documented information