GRSee Training

PECB Certified ISO/IEC 27001 Lead Auditor

Master the audit of information security management systems (ISMS) based on
ISO/IEC 27001:2022

Why should you attend?

Information security threats and attacks grow and evolve continuously. As such, organizations are increasingly concerned
about how their valuable information is handled and protected. The best form of defense against threats and attacks is the
proper implementation, auditing, and management of information security controls and best practices. Information security is
a key expectation and requirement of customers, legislators, and other interested parties.

PECB ISO/IEC 27001 Lead Auditor training course is designed to prepare you to audit an information security management
system (ISMS) based on ISO/IEC 27001. During this training course, you will acquire the knowledge and skills to plan and carry
out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process.

The training content is comprised of practical exercises and case studies which bring you real-world expertise that you can
apply to your day-to-day operations and activities. Based on practical exercises, you will be able to master audit techniques and
become competent to manage an audit program, audit team, communication with customers, and conflict resolution.

Our training courses are all-inclusive, meaning that they cover everything you need, in order to get the certificate. After acquiring
the necessary expertise to perform an audit, you can sit for the exam and apply for a “PECB Certified ISO/IEC 27001 Lead Auditor”
credential. By holding a PECB Lead Auditor Certificate, you will demonstrate that you have the capabilities and competencies to
audit organizations based on best practices.

Who should attend

  • Auditors seeking to perform and lead information security management system (ISMS) audits
  • Managers or consultants seeking to master the information security management system audit process
  • Individuals responsible to maintain conformity with the ISMS requirements in an organization
  • Technical experts seeking to prepare for the information security management system audit
  • Expert advisors in information security management

Learning objectives

  • Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/
    IEC 27001
  • Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor
  • Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and
    principles
  • Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO
    19011 guidelines, and other best practices of auditing
  • Manage an ISO/IEC 27001 audit program

Course agenda

Day 01

 Introduction to the information security management system (ISMS) and ISO/IEC 27001

  • Training course objectives and structure
  • Standards and regulatory frameworks
  • Certification process
  • Fundamental concepts and principles of information
    security
  • Information security management system (ISMS)

Day 02

Audit principles, preparation, and initiation of an audit

  • Fundamental audit concepts and principles
  • The impact of trends and technology in auditing
  • Evidence-based auditing
  • Risk-based auditing
  • Initiation of the audit process
  • Stage 1 audit

Day 03

On-site audit activities

  • Preparing for stage 2 audit
  • Stage 2 audit
  • Communication during the audit
  • Audit procedures
  • Creating audit test plans

Day 04

Closing the audit

  • Drafting audit findings and nonconformity reports
  • Audit documentation and quality review
  • Closing of the audit
  • Evaluation of action plans by the auditor
  • Beyond the initial audit
  • Managing an internal audit program
  • Closing of the training course

Day 05

Certification exam