1 - Introduction to the information security management system (ISMS) and ISO/IEC 27001

• Course objectives and structure
• Standards and regulatory frameworks
• Certification process
• Fundamental principles of Information Security
• Management Systems
• Information Security Management Systems (ISMS)

1 - Information Security Managemacent Fundamentals

• ISMS principles and objectives
• ISO/IEC 27001 requirements
• Information security concepts
• ISMS compliance and assessment
• Information security and compliance

2 - Audit Principles and Preparation

• ISMS audit principles
• ISO 19011 and ISO/IEC 17021-1
• Audit planning and preparation
• Audit scope, objectives, and criteria
• Audit team coordination
• Audit documentation

2 - Audit principles, preparation, and initiation of an audit

• Fundamental audit concepts and principles
• Evidence based audit approach
• Initiating the audit
• Stage 1 audit
• Preparing the stage 2 audit (on-site audit)
• Stage 2 audit (Part 1)

3 - On-site audit activities

• Stage 2 audit (Part 2)
• Communication during the audit
• Audit procedures
• Creating audit test plans
• Drafting audit findings and non-conformity reports

3 - Conducting ISMS Audits

• Internal and external audits
• Audit methods and techniques
• Audit interviews
• Documentation and evidence review
• ISMS conformity assessment
• Audit findings and documentation

4 - Audit Closure and Management

• Audit results and evaluation
• Nonconformity identification
• Audit reporting
• Closing meetings
• Corrective actions and follow-up
• Audit program management
• Communication and conflict resolution

4 - Closing the audit

• Documentation of the audit and the audit quality review
• Closing the audit
• Evaluating action plans by the auditor
• Benefits of the initial audit
• Managing an internal audit program
• Competence and evaluation of auditors
• Closing the training

5 - Certification Exam