Introduction
This five-day course is ideal to pursue a qualification or develop an advanced skill in information security management systems auditing. You will be provided with the knowledge and skills to carry out second party audits to address information security risks where key data is processed or handled by external organisations.
Successful completion of this course is accepted by IRCA from those intending to apply for certification as a management systems auditor and so hoping to upskill as a supplier (2nd party) auditor for their organisation or as a certifying (3rd party) auditor for a certification body.
Who should attend?
The course is aimed towards participants who:
- wish to expand their knowledge about effective audit practices or
- may wish to build on their existing auditing experience especially in auditing Information Security Management Systems (ISMS) and its related processes and procedures
- may want to audit their existing ISMS processes for effectiveness and improvement
- are a consultant providing advice on ISO/IEC 27001:2022 and require formal training and recognition through IRCA
- are a security or quality professional who wishes to add ISO 27001:2022 to their skill set.
What will you learn?
- To critically review the typical documentation an organisation would prepare to meet the requirements of ISO 27001:2022
- How to plan, conduct and conclude an external audit of information security management
- How to manage and work with an audit team, with practical examples related to an ISMS audit
- To report findings accurately and factually in terms that are valued by management
- To make accurate decisions about accepting the conformance of a management system in supplier evaluations or independent certification
- How to evaluate corrective actions effectively to eliminate causes of problems.
Course length
- 5 days for the traditional face to face classroom & virtual classroom course with an exam on the final day.
What do you need to prepare?
Participants should have prior knowledge of ISO 27001:2022 as well as experience in auditing and Information security management systems.
What's included?
- Instructor-led training featuring accelerated learning methods
- Pre-course reading, workbooks, case study
- A certificate of training attendance or training achievement.
Training from LRQA
With LRQA, you can access a wide range of courses to help you further your career and bring improvements to the management systems in your organisation. With many learning styles to choose from, our training courses can help you develop and reach your next level. Find out more about Ascend Training Courses from LRQA.
Your future development
- ISO 27001:2013 Implementation
- GDPR Data Protection Officer Workshop
- Data Protection Impact Assessment Workshop.
CQI & IRCA certified
This LRQA training course satisfies the formal training requirements stipulated by the CQI & IRCA.
CQI and IRCA certified training is mapped to a unique competency framework based on the latest skills needed by employers. As an Approved Training Partner, LRQA has been thoroughly assessed to ensure the highest standards.
For more information, please visit the CQI & IRCA website.