• 1. ISMS concepts and ISO 27001 standard
  • ISMS concepts and benefits
  • Risk assessment and management
  • ISO 27001 process framework requirements
  • ISO 27001 standard requirements
  • ISMS documentation

  2. Auditing principles
  • Auditing objectives
  • Types of audits
  • Process approach

  3. Roles and responsibility of auditors
  • Auditors and lead auditors
  • The auditors’ responsibilities
  • The lead auditors’ responsibilities
  • Auditors qualification and certifications

  4. Planning an audit
  • Pre-audit planning
  • Reviewing documentation
  • Developing an audit plan
  • Preparing checklists or working documents
  • Communication factors

  5. Conducting an audit
  • Opening meeting
  • Collecting objective/audit evidence
  • Effective interviewing techniques
  • Identifying and recording nonconformities
  • Preparing for the closing meeting
  • Do’s and Don’t’s of auditing
  6. Reporting audit results
  • Conducting the closing meeting
  • Preparing the audit report
  • Distributing the audit report
  
  7. Corrective actions
  • Corrective action responsibilities
  • Follow up scheduling
  • Monitoring corrective action
  
  8. ISO 27001 registration
  • Choosing a registrar
  • The registration process
  • Surveillance audits
  
  9. Exercises / Roleplay (50% of course time)
  10. Written examination

• This course is specially designed for:

  • Information Security Practitioners, Head – IT
  • Chief Information Security Officer
  • Information Security Management System Consultants
  • Information Security Management System Management Representative
  • Information Security Managers and core group members responsible for establishing, implementing, maintaining, auditing and improving Information Security Management Systems
  • Professionals who have a role to play in the implementation of Information Security Management System

• overseeing an organisation’s information security compliance status. 

TÜV SÜD South Asia as an approved training partner of CQI|IRCA and fulfils all compliances of the course PR373: ISMS ISO/IEC 27001:2022 Lead Auditor holding training course reference No 2544. Participants who score 70% and above in continuous assessment, plus 50% overall in each domain in final written examination will be issued a CQI|IRCA accredited certificate of successful completion of the course, which is a renowned certification and carries worldwide acceptance. Unsuccessful candidates will be issued a certificate of attendance.

Final examination will be conducted Online by CQI|IRCA. Please find exam framework for CQI|IRCA Lead Auditor Training Course as below:

• Exam duration: 1 hour 45 minutes
• Total number of items/questions: 40
• Maximum available: 80
• Learners must achieve the minimum passing mark for each domain and an overall score of 40 marks (50%)
• Open book exam. Learners can access relevant ISO standard during exam (electronic or paper copy permitted)