IT Audit and Information Security Management System (ISO 27001)

Explains the core approach of information technology auditing and the implementation and accreditation readiness of the ISO 27001 Information Security Management System; covers the policies, processes and controls organizations need to be audit-ready.

Training content

• The IT audit process and audit evidence
• IT governance and risk management
• ISO 27001 structure and control set
• Risk assessment and the Statement of Applicability
• Policy, procedure and records management
• Internal audit and preparation for the certification audit
• Personal data protection and data privacy controls

At the end of this training, participants

• Evaluate the organization's IT controls from an auditor's perspective.
• Plan the ISO 27001 implementation steps and the required documentation.
• Conduct an internal audit and prepare a readiness checklist for the certification audit.

Training method

Other courses in the same category