ISO 27001: 2022 Information Security Management System - Internal Auditor
This two day ISO 27001 Internal Auditor Training will provide participants with the practical skills and knowledge to plan and perform internal audits of an ISMS for compliance with the ISO 27001:2022. It will cover topics such as the purpose of an audit, conducting a Gap Analysis auditing to prepare for the new ISO27001:2022 standard.
Migration from ISO27001:2013 to the new version will involve risk assessment, policy assessment, audit review, document preparation, and other activities. The risk assessment should compare the measures put into place by the organization for the existing ISO27001:2013 standard against the needs for compliance with the new ISO27001:2022.
This course introduces participants to the ISO 27001:2022 Information Security Management System (ISMS) standards and provides a complete understanding of the practical application of the standard. The course will cover topics ranging from the basics of ISMS, its components, and its benefits, to the audit process and finding areas of intervention. Participants will gain an understanding of the requirements of the ISO 27001:2022 and what is needed to implement them.
Develop and plan information security management systems internal audits.
Identify how ISO27001 (ISMS) can be integrated into ISO9001 (QMS)
Build confidence when being audited by third-party assessors.
Preparing for migration from iso27001:2013 and the new ISO27001:2022 standard
Risk assessment / Risk Treatment Methodology
Review of the statement of applicability SOA
Overview of ISO 27001: 2022 ISMS
Understand the ISO 27001:2013 Information Security Management System (ISMS) benchmark standard
Learn the practical application of the standard and focus on performance-based, risk-based auditing
Acquire the necessary skills to plan and perform internal audits of an ISMS to ensure compliance
Understand the benefits of setting up an ISMS
Develop expertise on how to document findings and areas for improvement