ISO 27001 Internal Auditor Training

ISO 27001 Internal Auditor Training

QE Safety Consultancy providing ISO 27001 Internal Auditor Training in Malaysia.

Course Description

ISO 27001 is the leading international standard for Information Security Management System (ISMS). This course enables participants to learn how to develop and improve the ISMS in an organization. This course also enlightens participants the framework of policies and procedures that comprises of legal, physical and technical controls involved in an organisation’s information risk management processes.

Course Content

• Effectively define tools & techniques used in information Security Management.
• Understand the importance of asset & owner identification
• Identify the threats, vulnerabilities and impacts involved
• Understand the requirements of ISO 27001(ISMS)
• Define the audit scope, criteria, frequency, methodologies, responsibilities and requirements
• Effectively perform an information security internal audit
• Reporting the audit
• Corrective action and follow-up

Target Audience

This course is specially designed for:

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
• Project Managers or consultants seeking to master an ISMS audit process
• Quality professionals
• Technical experts seeking to prepare for an ISMS audit
• Expert advisors in Information Security Management System
• Professionals associated with Information Security team such as Chief Security Officers (CSOs), Chief Information Security Officers (CISOs), and Chief Information Officers (CIOs)

Benefits

At the end of this course, participants will be able to:

• Correctly review the audit requirements of ISO/IEC 27001:2022
• Learn and understand the auditing principles
• Learn ways to assess security threats and vulnerabilities
• Understand requirements of security controls and countermeasures
• Understand the roles and responsibilities of an auditor & lead auditor
• Efficiently plan, execute, report, and follow-up on an ISMS audit