The aim of this course is to provide delegates with an understanding of ISO/IEC 27001:2005 (Information technology - Security techniques - Information security management systems - Requirements).
The course will demonstrate a logical approach to establishing the compliance and maturity of an Information Security Management System (ISMS). It will enable an auditor, who may be in ‘unfamiliar territory’, to identify any deficiencies in meeting the requirements of the standard; establish fitness for purpose; report observed deviations from the ISMS; and identify opportunities for improvement.
Upon completion of this course, delegates will have increased confidence to plan, conduct and report on, an ISO/IEC 27001:2005 audit. The course will also benefit those who may be considering implementing ISO/IEC 27001 and wish to gain an understanding of the process and requirements.
This 1 day course is designed for personnel who have some knowledge or experience of Internal Auditing of Business Management Systems complying with standards such as ISO 9001, ISO 14001 and OHSAS 18001.
For delegates without such knowledge or experience, it is recommended that the ‘Introduction to ISO Internal Auditing’ course is attended first.
The objective of this course is to provide delegates with the knowledge and an approach which will enable them to conduct an ISO/IEC 27001 audit with confidence.
Our ISO/IEC 27001 training is conducted by tutors with extensive practical experience of developing, implementing and auditing Information Security Management Systems; and who are Accredited Lead Auditors.
· Introduction - Background to ISO/IEC 27001
· Understanding the requirements of ISO/IEC 27001
· Information Security Objectives, ISMS Scope and Policies
· Understanding ‘Information Assets’
· Assessment of Risks
· ‘Risk Appetite’ and the Treatment of Risks
· The Information Security Management System
· Auditor role and responsibilities
· Planning and conducting audits
- Accident Investigation
- Asbestos Awareness Training
- Basic Health & Safety (Introduction)
- Business Continuity (BS25999)
- Business Continuity Implementation and Audit
- Certificate - Business Continuity Institute (CBCI)
- Construction Design Management (CDM) regulations 2007
- Control of Substances Hazardous to Health
- Coshh Risk Assessment
- Designing Safe Systems of Work
