Course Content:
- Introduction & Course Objectives
- Purpose and intent of ISO 27001:2013
- Requirements of ISO 27001:2013
- Risk Assessment
- Preparing the statement of applicability
- Selection of control objectives
- Analysis of clauses 4-8 of the ISO/IEC 27001:2013 standard
- Roles & responsibilities of ISMS Internal Auditors
- Development of an internal audit program
- Preparation of an ISMS audit
- Conducting audits – audit techniques
- Writing audit reports
- Corrective actions & audit follow up
- Q&A
- Conclude & Follow Up Process
On the course completion participants will be able to:
- Understand the application of the information security management system in ISO/IEC 27001:2013 context
- Develop personal skills & knowledge required to conduct the internal audit
