Duration: 24 hours of synchronous distance learning
Registration fee: € 825.00 + VAT
Test: The course includes a test followed by a certificate of achievement.
Target audience: The course is aimed at professionals interested in a career as an auditor/lead auditor, as well as at staff in complex organizations who need advanced skills in managing audits of information security management systems.
complex organizations who need advanced skills in managing audits of information security management systems.
Prerequisites: knowledge of the structure and content of UNI ISO 27001:2022.
The success of an audit depends on the competence of the professionals involved, their in-depth knowledge of the UNI EN
ISO/IEC 27001 standard, and their ability to plan and conduct audit activities efficiently, generating added value for all interested parties and making a tangible contribution to continuous improvement.
The ability to establish effective relations with different contacts is also fundamental.
In response to global challenges in IT security, and to strengthen the digital confidence of stakeholders, the new version of ISO/IEC 27001, the most widely recognized international standard for information security management, has been published. This updated version helps organizations to protect their information resources, now more than ever strategic in an increasingly digital environment.
The course offers a comprehensive update on the transition from ISO/IEC 27001:2013 to the new ISO/IEC 27001:2022, illustrating the main new features and providing practical tools for implementing and verifying the changes introduced.
Course objectives
- Analyze the main changes introduced by ISO/IEC 27001:2022
- Provide the knowledge required to conduct third-party audits of information security management systems
- Deepen your understanding of first, second and third party audit techniques in accordance with ISO 19011
- Develop skills for the effective application of requirements
Course content
- Audit techniques
- Information security management system processes
- Audit planning
- Audit operational activities
- Evidence gathering
- Recording non-conformities
- Performance assessment and continuous improvement
- Accreditation process