• • • • Who is the course for?

This course is for those who:

• Are third party auditors working for Certification Bodies, responsible for conducting audits which certify organisations against ISO 27001 and ISO 19011
• Internal auditors seeking to understand the specific requirements of auditing Information Security Management Systems (ISMS) needed to confirm that an organisation conforms to the ISO 27001 or ISO 19011 standard

What will I learn?

You will learn to: 

• Audit organisations to identify conformity with ISO 27001 
• Evaluate the principles of risk management, including; risk identification, analysis, and evaluation 
• Propose appropriate treatment and control options to reduce information security risk, support business objectives, and improve information security
• Lead organisations through an audit program 
• Direct audit teams
• Evaluate the effectiveness of applied corrective actions to maintain ISSM conformity with ISO 27001

•  Multiple choice (including scenario based questions) 
• 40 questions per paper 
• 20 marks required to pass (50%)
• 120 minutes
• Open Book items required:
  •  ISO/IEC 27001:2022
  • ISO/IEC 27002:2022
  • ISO 19011:2018
  • APMG ISO/IEC 27001 Supplementary Paper
•  Exams can be taken online