ISO/IEC 27001:2022 Auditor - Training with certification
Training with exam preparation and certification (PECB)
.svg)
Machine Learning Engineer
A functioning ISMS in accordance with ISO/IEC 27001:2022 is only as good as its regular audits. With this training training course, you will become a certified specialist for the planning, implementation and follow-up of ISMS audits. You will learn how to professionally manage internal and external audits in accordance with ISO/IEC 27001:2022, reliably assess standard requirements and systematically document audit processes. The training not only provides in-depth knowledge of the standard and the risk-based approach, but also in-depth knowledge of audit principles, methods and techniques. You will carry out audit exercises yourself, prepare interviews, evaluate evidence and formulate audit findings. The course concludes with a recognized examination to become a certified ISO/IEC 27001:2022 Lead Auditor - a valuable proof of competence for your professional practice.
1. introduction to the information security management system (ISMS) and ISO/IEC 27001
- Aims and structure of the course
- Standards and legal framework
- Certification process
- Basic concepts and principles of information security
- Information security management system (ISMS)
2. audit principles, preparation and initiation of an audit
- Basic audit concepts and principles
- The influence of trends and technologies in auditing
- Evidence-based audit
- Risk-based auditing
- Initiation of the audit procedure
- Audit level 1
3. audit activities on site
- Preparation for the level 2 audit
- Audit level 2
- Communication during the audit
- Audit procedure
- Creation of audit test plans
4. completion of the audit
- Writing audit findings and reports on non-conformities
- Audit documentation and quality inspection
- Completion of the audit
- Evaluation of the action plans by the auditor
- Beyond the first audit
- Management of an internal audit program
- Completion of the training course
5. certification examination
The course content is based on the official PECB examination specifications.
Requirements:
There are no formal prerequisites for this training.
- Understanding the basic concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
- Interpreting the ISO/IEC 27001 requirements for an ISMS from an auditor’s perspective
- Evaluate the conformity of the ISMS with the requirements of ISO/IEC 27001 in accordance with the basic audit concepts and principles
- Plan, conduct and complete an ISO/IEC 27001 compliance audit in accordance with the requirements of ISO/IEC 17021-1, the guidelines of ISO 19011 and other auditing best practices
- Managing an ISO/IEC 27001 Audit Program
Classes are conducted in German using German-language materials. When you book the training, you can choose to order your personal study materials in either German or English. The exam will also be provided in that language.
Insightful articles and best-practice examples of ISMS audits.
The exercises are based on a case study.
Numerous practice questions (which are structured similarly to the certification exam) will help you prepare thoroughly for the final exam.
The "PECB Certified ISO/IEC 27001 Lead Auditor" exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following areas of competence:
- Area 1: Basic principles and concepts of the information security management system (ISMS)
- Area 2: Information security management system (ISMS)
- Area 3: Basic audit concepts and principles
- Area 4: Preparation of an ISO/IEC 27001 audit
- Area 5: Conducting an audit in accordance with ISO/IEC 27001
- Area 6: Completion of an audit in accordance with ISO/IEC 27001
- Area 7: Management of an ISO/IEC 27001 audit program
The exam is available in German and English.
The exam fee is included in the seminar price.
Exam format:
Online, multiple-choice questions, number of questions: 80, duration: 180 minutes, language: English, open book
Examination language & duration:
If you choose an examination language that is not your mother tongue, you will be given an extra 30 minutes.
candidates who have completed the training but failed the exam may retake the exam once free of charge within 12 months of the original exam date.
This training is aimed at:
- Auditors who wish to conduct and lead certification audits for information security management systems (ISMS)
- Managers or consultants who want to master an audit process for an information security management system
- Persons responsible for maintaining compliance with the requirements of the information security management system
- Technical experts who want to prepare for an information security management system audit, as well as information security consultants
.svg)
