Duration: 24 hours of synchronous distance learning in accordance with ISO/IEC 27001:2022 standards
Registration fee: € 825.00 + VAT
Test: The course includes a test followed by a certificate of successful completion. This is done in compliance with ISO/IEC 27001:2022.
Target audience: The course is aimed at professionals interested in a career as an auditor/lead auditor. It is also intended for personnel in complex organizations. These organizations need advanced skills in managing ISO/IEC 27001:2022-compliant audits of information security management systems.
Prerequisites: knowledge of the structure and content of UNI ISO 27001:2022.
The success of an audit depends on the competence of the professionals involved and their in-depth knowledge of the UNI EN
ISO/IEC 27001:2022 STANDARD. It also depends on their ability to plan and carry out audit activities effectively. These actions must generate added value for all interested parties. They make a tangible contribution to continuous improvement.
The ability to establish effective relations with different contacts is also fundamental.
In response to global challenges in IT security, and to strengthen the digital confidence of stakeholders, the new version of ISO/IEC 27001, the most widely recognized international standard for information security management, has been published. This updated version helps organizations to protect their information resources. Today, these resources are more strategic than ever in an increasingly digital environment.
The course provides a comprehensive update on the transition from ISO/IEC 27001:2013 to the new ISO/IEC 27001:2022. It illustrates the main new features and provides practical tools for implementing and verifying the changes introduced.
Course objectives
- Analyze the main changes introduced by ISO/IEC 27001:2022
- Provide the knowledge required to conduct third-party audits of information security management systems
- Deepen your understanding of first, second and third party audit techniques in accordance with ISO 19011
- Develop skills for the effective application of requirements
Course content
- Audit techniques
- Information security management system processes
- Audit planning
- Audit operational activities
- Evidence gathering
- Recording non-conformities
- Performance assessment and continuous improvement
- Accreditation process
