Heading Sub Title

CQI / IRCA approved Lead Auditor Training Course on ISO 27001:2022 Information Security Management System.

Heading Sub Title

Course Features:.

This CQI/IRCA-certified ISO 27001:2022 Lead Auditor program (IRCA Course No. 2586) has been developed in alignment with ISO 19011, ISO 27006 and ISO/IEC 17021 requirements. The training provides a detailed understanding of the ISO 27001:2022 Information Security Management System and combines theoretical learning with practical auditing exercises. Delegates will gain the knowledge and skills needed to plan, conduct, report, and follow up on first-party, second-party, and third-party ISMS audits. The course also equips participants to lead audit teams effectively and support organizations in improving ISMS performance and meeting information security objectives.

Heading Sub Title

Course Objectives:.

  • To provide participants with a foundational understanding of ISO 27001:2022 and the core principles of an Information Security Management System
  •  To help delegates gain clarity on essential concepts and requirements related to ISMS auditing
  • To develop practical auditing skills required to progress toward becoming a certified Lead Auditor
  • To equip participants with the ability to plan, conduct, and manage ISMS audits effectively in alignment with ISO 19011, ISO 27006, and ISO/IEC 17021 standards
  • To strengthen both technical knowledge and behavioral competence necessary for leading ISMS audits confidently and effectively.
Heading Sub Title

Who should attend ?.

  • Individuals aspiring to become certificated auditors/lead auditors to make career in ISMS auditing 
  • Information security managers / leaders ISMS Management Representatives
  •  Individuals responsible for managing the audit programs in their organization
  •  Departmental / functional information security coordinators 
  • Existing internal auditors of ISMS Information Security Management System Consultants.
Heading Sub Title

Prerequisites:.

Participants should have a foundational understanding of ISMS concepts, including information security principles, management involvement, terminology, and the requirements of ISO 27001:2022. Familiarity with the PDCA methodology will also help in successfully completing the program.

Heading Sub Title

Course Contents:.

  • CQI/IRCA Registration Scheme and benefits of becoming SMS Lead Auditor 
  • Relevant standards, ISO/IEC 20000- 1:2018, ISO/IEC 20000-2:2019, ISO 20000-6, ISO/IEC—17021-1:2015, ISO 19011:2018
  • The importance of Service Management System
  •  The importance of Information Technology Service Management 
  • The content and framework of SMS 
  • Introduction to auditing SMS 
  • ISO/IEC 20000-1:2018 auditing techniques 
  • Managing and leading a ISO/IEC 20000-1:2018 audit team
  •  Interview techniques
  •  Recording and reporting nonconformities
  •  Audit reporting
  •  Corrective Action and Audit Close out process
  •  Continuous Assessment exercises and feedback 
  • Syndicate and role play exercises and feedback 
  • Examination.
Heading Sub Title

Certificate:.

A certificate of completion will be awarded to participants who attend all course sessions and successfully pass the final assessment.