GOAL

The ISO 27001 Lead Auditor course enables you to become an auditor or auditor for Information Security Management Systems (ISMS).

PRE-REQUISITE

Knowledge of management systems in another area, such as quality, is not required. The concept of ISMS (ISO 27001) and the performance of management system audits (ISO 19011) will be explained during the training. However, ISO 27001 and ISO 19011 fondamentals before training is recommended. The 133 security measures are quickly overflown and will not be acquired at the end of this training, their mastery requiring a solid foundations in computing. In addition to the prerequisite for training, candidates must have at least a minimum initial training or have at least five years' professional experience in the field of safety or quality management systems.

DURATION

5 days, that is to say 40 hours divided in 31h30 of course, 5h00 of individual work on the exercises and 3h30 of examination.

HOURS

Monday to Thursday: 09:30 to 12:00 and 13:30 to 17:30 (or 18:00 at the latest) on Friday: from 9:30 to 12:00 and from 13:30 to 14:00 to 17:00 / 17:30.

TARGETED AUDIENCE

This course is intended for people who are required to conduct audits in the field of information systems security. It therefore mainly concerns :

Members of internal control teams, or security teams.
The external auditors carry out pre-audits for their clients.
Persons wishing to conduct ISO 27001 compliance audits, in particular qualiticians or, more generally, those familiar with another management system.
Those who plan to be audited and understand the mindset of the auditor.

PEDAGOGICAL METHOD

The teaching method is based on the following four points :

Lectures based on ISO 19011, ISO 27001 and ISO 27002, illustrated with examples based on real cases.
Individual revision exercises to prepare for the exam.
Practical exercises carried out by the trainees alone or in a group, based on real cases of audit, with an oral presentation.
A role play listener / audited.