ISO27001 Lead Auditor Course

ISO/IEC 27001 Lead Auditor training enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognized audit principles, procedures and techniques.

Who should attend

Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
Managers or consultants seeking to master an Information Security Management System audit process
Individuals responsible for maintaining conformance with Information Security Management System requirements
Technical experts seeking to prepare for an Information Security Management System audit
Expert advisors in Information Security Management

Learning objectives

Understand the operations of an Information Security Management System based on ISO/IEC 27001
Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
Understand an auditor’s role to: plan, lead and follow-up on a management system audit in accordance with ISO 19011
Learn how to lead an audit and audit team
Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
Acquire the competencies of an auditor to: plan an audit, lead an audit, draft reports, and follow-up on an audit in compliance with ISO 19011

Educational approach

This training is based on both theory and best practices used in ISMS audits
Lecture sessions are illustrated with examples based on case studies
Practical exercises are based on a case study which includes role playing and discussions
Practice tests are similar to the Certification Exam

Prerequisites

A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.

Presenter

Amir Rezghian is a Cybersecurity Manager, Expert, and Lead Auditor with more than 18 years of experience in cybersecurity management, architecture design, incident response, risk, and governance in the public sector, universities, and corporations. Amir graduated with a Master’s Degree in Information Security from Royal Holloway, University of London and is an MBA Executive candidate from the University of New South Wales.

Amir started his career in software development, systems engineering and IT infrastructure. He completed his Bachelor’s Degree in computer engineering and has a comprehensive technical background in IT and Information Security. Amir has been qualified as Certified Information Systems Security Professional (CISSP) from ISC2 and recognised as ISO 27001 Lead Auditor and Trainer by PECB.

Course Information

Course outline

Day 1: Introduction to the information security management system (ISMS) and ISO/IEC 27001

Day 2: Audit principles, preparation, and initiation of an audit

Day 3: On-site audit activities

Day 4: Closing the audit

Day 5: Certification Exam

Cancellation policy

Courses will be held subject to sufficient registrations. UNSW Canberra reserves the right to cancel a course up to five working days prior to commencement of the course. If a course is cancelled, you will have the opportunity to transfer your registration or be issued a full refund. If registrant cancels within 10 days of course commencement, a 50% registration fee will apply. UNSW Canberra is a registered ACT provider under ESOS Act 2000-CRICOS provider Code 00098G.