IFECARM GROUP — QHSE Risk Management

Home / Training catalogue / ISO/IEC 27001 Lead Auditor training

Cybersecurity & business continuity

ISO/IEC 27001 Lead Auditor training

Duration : 5 Jours Download the course sheet as PDF
IFECARM GROUP
Course sheet
Cybersecurity & business continuity 5 Jours From 150 000 FCFA

In a nutshell

What this course aims to achieve

Master the audit of an Information Security Management System (ISMS) compliant with the ISO/IEC 27001 standard

Five days to audit an information security management system under ISO/IEC 27001 and lead an audit team.

Key challenges

  • The audit covers technical controls the auditor cannot all test: they must choose relevant samples and question accurately.
  • A well-written statement of applicability can hide controls not applied: the gap lies between paper and practice.
  • The lead auditor must defend findings before a management that thinks its system secure.

Learning objectives

  • Explain the ISO/IEC 27001 requirements relevant to auditing.
  • Plan and run an information security management system audit.
  • Audit risk assessment, security controls and improvement.
  • Lead the team, write the report and present conclusions.
  • Prepare for the lead auditor exam.

Detailed programme

  1. 1Auditing principles and the auditor’s role.
  2. 2ISO/IEC 27001 requirements and Annex A controls.
  3. 3Audit planning: programme, sampling, team.
  4. 4Audit techniques: interviews, evidence review, observation.
  5. 5Findings, nonconformities and grading.
  6. 6Report, closing meeting and follow-up.
  7. 7Audit simulations and exam preparation.

Target audience

  • Auditors, information security and compliance managers, consultants

Prerequisites

  • Knowledge of ISO/IEC 27001 and auditing; scheme conditions to be checked before enrolment.

Learning methods

In-person or remote training with audit simulations.

Learning assessment

Lead auditor exam under the scheme concerned.

Scope of application

Any associated personal certification (lead auditor, lead implementer, manager…) depends on the exam and certification body: the course prepares for it without guaranteeing it. It does not certify the organisation, whose certification belongs to an accredited body.

Upcoming sessions

Register for a session

Dates are set by our team. Choose a session and the number of participants: your registration is recorded and confirmed once payment is received.

From 150 000 FCFA per participant

No session scheduled at the moment. Contact us to be told about the next session or to arrange a tailor-made course.

Back to the catalogue · Cybersecurity & business continuity
(+229) 01 91 32 24 70