ISO27001
Certified practitioner programme
- Detail the requirements of ISO/IEC 27001:2017
- How to identify information assets
- How to identify the threats, vulnerabilities and risks associated with Assets
- How to Plan the ISMS implementation program: Timescales and resources, Risk assessment and management, Producing a Statement of Applicability and Documentation, monitoring and auditing
- Prepare for ISO27001 certification (Phase 1 & 2)
- Understand the sources of information and further development
- Understanding of best-practice audit methodology
- Prepare, lead and report on the findings of an information security audit.
- Detailed information about auditing the ISMS against ISO 27001
- Interview techniques, following audit trails and reviewing documented evidence
- Audit risk assessments, business continuity and effective continual improvement
- How to identify nonconformities, and ensure appropriate corrective action is undertaken
- Challenges of maintaining ISO27001 certification, including surveillance audits
- Governance and the relationship between auditing and risk management