Information Technology
ISO 20000 IT Service Management
Audit and improve IT service-management systems against ISO/IEC 20000.
Upcoming: Manchester
Information Technology
ISO 27001 Information Security
Lead information-security management-system implementation and audits.
Advanced5 daysEnglish or ArabicISO Systems
Course overview
ISO/IEC 27001 is the international standard for information security management. It helps organisations protect the confidentiality, integrity and availability of information through a risk-based management system.
Show more
This course covers the 2022 edition and its 93 Annex A controls, and teaches you to audit risk assessment, the statement of applicability and the effectiveness of technical, physical, people and organisational controls.
Key takeaways
- 01Interpret ISO/IEC 27001:2022 and the updated Annex A controls
- 02Audit information security risk assessment and the statement of applicability
- 03Assess organisational, people, physical and technological controls
- 04Plan and lead first-, second- and third-party audits using ISO 19011
- 05Report findings that drive real corrective action
Course outline
- Day 1
Information security and ISO/IEC 27001
- Information security principles
- ISO/IEC 27000 family
- Context, scope and leadership
- Day 2
ISMS requirements and controls
- Risk assessment and treatment
- Statement of applicability
- Annex A controls and ISO/IEC 27002
- Day 3
Audit principles and planning
- ISO 19011 audit principles
- Certification audits under ISO/IEC 17021-1
- Audit programme, scope and plan
- Day 4
Conducting the audit
- Opening meeting and process-based interviews
- Sampling and gathering objective evidence
- Writing clear nonconformity statements
- Day 5
Reporting and follow-up
- Audit conclusions and closing meeting
- Report writing and certification recommendation
- Corrective-action follow-up and surveillance
- Examination
Related courses
Information Technology
Computing
Learn practical computing skills for digital workplaces and further IT study.
Upcoming: Manchester
Quality Management
ISO 9001 Lead Auditor
Plan and lead quality-management system audits.
Upcoming: Manchester
Environment & Sustainability
ISO 14001 Lead Auditor
Audit environmental management systems with confidence.
Upcoming: Manchester
Audit, Governance & Compliance
ISO 45001 Lead Auditor
Lead occupational health and safety management-system audits.
Upcoming: Manchester
Quality Management
Lean Six Sigma Green Belt
Improve processes using practical data-driven methods.
Upcoming: Manchester
Laboratory, Testing & Calibration
ISO/IEC 17025 Laboratory Competence
Apply competence, impartiality and consistent laboratory operation.
Upcoming: Jeddah
Quality Management
Lean Six Sigma Black Belt
Lead complex process-improvement projects with advanced Lean Six Sigma methods.
Upcoming: Manchester
Frequently asked questions
Does the course cover the 2022 transition?
Yes. We explain what changed from the 2013 edition and how certified organisations transition.
How is the course assessed?
Through continuous assessment of workshop exercises and a written examination on the final day.
How do I choose the right course?
Compare your professional goals, experience and preferred format, or ask an adviser to help.
Are courses available online?
Yes. Live virtual and in-house options are available depending on the programme.
Will I receive a certificate?
Certificate requirements depend on the programme and awarding organisation.
Reviews
Where this course runs
LET'S TALK
Request a call back
Tell us what you need and a BEMCON adviser will contact you.