ISO27001 Lead Implementer and Lead Auditor Combination Online

Course overview

The ISO27001 Lead Implementer and Lead Auditor Combination Online course outline

The ISO27001 Lead Implementer and Lead Auditor Combination Online course benefits

Save time and money

Save time and travel costs with ISO 27001 online training delivered to any location with Internet access.

Developed by experts

Developed by acknowledged ISO 27001 experts Alan Calder and Steve Watkins, and drawing from their industry-leading implementation guide IT Governance: An International Guide to Data Security and ISO27001/ISO27002.

Delivered by professionals

Delivered by an experienced ISO 27001 trainer and consultant who will use a combination of formal training, practical exercises and relevant case studies.

Led by specialists

An experienced ISO 27001 auditor and practitioner will explain how to lead an audit from start to finish.

Aligned with best practice

Aligned with the best-practice ISO 19011:2011 (Guidelines for auditing management systems) audit methodology.

Who should attend this course?

This course is aimed at individuals who want a globally-recognised ISO 27001 lead auditor qualification to further their careers, and anyone involved in information security management, writing information security policies or implementing ISO 27001, either as a lead implementer or as part of an implementation team.

• Job titles:
• IT/ Information Security Manager
  
• Compliance Auditor
• GDPR consultant
  
• IT/ Information Security Consultant
  
• Cyber Security Consultant
  
• Head of IT
  
• Information and risk manager
  
• IT/ Information security analyst
  
• IT/ Information Security Officer
  
• Internal Auditor
  
• ISMS manager
  
• Information Security Project Manager
  
• CISO (Chief Information Security Officer)
  
• Network manager

Why choose IT Governance for your training needs?

IT Governance is internationally recognised as the authority on ISO 27001. Our team led the world’s first ISO 27001 certification project, and since then we have trained more than 7,000 professionals on information security management system (ISMS) implementations and audits. 

Course details

What does the ISO27001 Lead Implementer and Lead Auditor Combination Online course cover?

• The key concepts, principles and main requirements of ISO/IEC 27001:2013.
  
• The terms and definitions used in the Standard, including risk and options for risk assessments.
  
• How to interpret the requirements of ISO/IEC 27001:2013 to determine the scope of your ISMS.
  
• How to secure senior management commitment by building a compelling business case.
  
• How to structure and manage your ISO 27001 project.
  
• How to review and map your existing controls to Annex A of ISO 27001.
  
• The importance of the Statement of Applicability (SoA), and justifications for inclusions and exclusions.
  
• How to carry out an information security risk assessment – the core competence of information security management.
  
• How to develop a management framework, write policies and produce other critical documentation.
  
• The importance of staff, an effective communication strategy and general awareness training.
  
• The key elements of management review.
  
• How to prepare for your ISO 27001 certification audit and ensure you that you pass first time.
  
• How to manage and drive continual improvement under ISO 27001. 
  
• An overview of the audit process used by certification bodies.
  
• Best-practice audit methodology based on ISO 19011.
  
• How to establish, maintain and manage an audit programme.
  
• How to plan, conduct, report, summarise and follow-up on an audit.
  
• Effective interviewing techniques and observation skills.
  
• How to use audits to identify nonconformities and ensure appropriate corrective action is taken.
  
• How the audit process is used in first, second and third-party audits.

Course agenda:

What’s included in this course?

• Full course materials (digital copy provided as a PDF file);
  
• The ISO 27001 Certified ISMS Lead Implementer exam;
  
• The ISO 27001 Certified ISMS Lead Auditor exam; and
  
• A certificate of attendance.

What equipment should I bring?

This course is delivered as a WebEx Live Online session. Anyone booked on this course is expected to have a reliable Internet connection at their home or office. We will check and confirm that you have the WebEx application installed, and that you can correctly log on to our WebEx training centre before the course.

To sit the online exam you will need:

• Internet Explorer 9 (or later) or Mozilla Firefox version 16 (or later);
  
• Internet access for the full time of the exam;
  
• To deactivate the pop-up blocker; and
  
• A working webcam on the machine you are using to sit the exam.

Course duration and times

Day 1: 9:00 am - 5:00 pm
Day 2: 9:00 am – 5.00 pm 
Day 3: 9:00 am – 5.00 pm 
Day 4: 9:00 am - 5:00 pm
Day 5: 9:00 am – 5.00 pm 
Day 6: 9:00 am – 5.00 pm 
Day 7: 9:00 am – 5.00 pm 
Day 8: 9:00 am – 1.00 pm 

CPD/CPE points

This course is equivalent to 56 CPD/CPE points.

The CIS LI qualification is acknowledged by the Payment Card Industry Security Standards Council (PCI SSC) as an approved qualification that meets the requirements of an individual applying to become a Payment Card Industry Data Security Standard (PCI DSS) Qualified Security Assessor (QSA).

Exams and qualifications

ISO27001 Lead Implementer and Lead Auditor Combination Online exams

Attendees sit the online ISO27001 CIS LI examination at the end of day 3 – a 90-minute, multiple-choice, ISO 17024-certificated exam set by IBITGQ. They also sit the online ISO 27001 Certified ISMS Lead Auditor (CIS LA) examination– a 90-minute, multiple-choice, ISO 17024-certificated exam set by IBITGQ at the end of the course. There is no extra charge for taking these exams.

What qualifications will I receive?

ISO 27001 Certified ISMS Lead Implementer (CIS LI) and ISO 27001 Certified ISMS Lead Auditor (CIS LA)

How will I receive my exam results and certificates?

• Provisional exam results will be available immediately on completion of the exam. Confirmed exam results will be issued within ten working days from the date of the exam.
  
• Certificates for those who have achieved a passing grade will be issued within ten working days from the date of the exam.
  
• Results notifications and certificates are sent directly to candidates by the relevant exam board in electronic format; please note that hard copy exam certificates are not issued.

Can exams be retaken?

Yes, if you are unsuccessful on the first attempt you can retake the exam for an additional fee. You can email us to schedule the retest for the exam.

Prerequisites

Are there any prerequisites for this course?

There are no formal entry requirements but it is assumed that you have taken the ISO27001 Certified ISMS Foundation training course or you have a good working knowledge of ISO 27001 gained through practical experience.

Is there any recommended reading?

We strongly recommend you purchase and read the standard prior to attending the course:

• ISO IEC 27001 2013 and ISO IEC 27002 2013

We also recommend that you purchase and read the following textbooks:

• ISO27001/ISO27002 – A Pocket Guide
• An Introduction to Information Security and ISO27001:2013 – A Pocket Guide