ISO/IEC 27001:2022 & VDA ISA TISAX Lead Auditor

This five-day lead auditor course was developed to cover all requirements of the ISO/IEC 27001:2022 standard. The course includes definitions from ISO/IEC 27000:2018 (Information Security Management Systems – Overview and Vocabulary), Guidance from ISO/IEC 27003:2017 (Information Security Management System Implementation and Guidance). Group exercises and case studies will be used to develop the required skills.

Learning Objectives:

• Understand the application of Information Security Management principles in the context of ISO/IEC 27001:2022.
• Relate the Information Security Management system to the organizational products, services, activities and operational processes.
• Relate organization’s context and interested party needs and expectations to the planning and implementation of an organization’s Information Security Management system.
• Understand the application of the principles, procedures and techniques of auditing.
• Understand the conduct of an effective audit in the context of the auditee’s organizational situation.
• Understand the application of the regulations, and other considerations that are relevant to the management system, and the conduct of the audit.
• Practice personal attributes necessary for the effective and efficient conduct of a management system audit.
• Establish, plan and task the activities of an audit team.
• Communicate effectively with the auditee and audit client.
• Organize and direct audit team members.
• Prevent and resolve conflict with the auditee and/or within the audit team.
• Prepare and complete the audit report.