ISO/IEC 27001:2013 Lead Auditor | PECB

• Normative, regulatory and legal framework related to information security
• Fundamental principles of information security
• ISO/IEC 27001 certification process
• Information Security Management System (ISMS)
• Detailed presentation of the clauses 4 to 8 of ISO/IEC 27001
• Fundamental audit concepts and principles
• Audit approach based on evidence and on risk
• Preparation of an ISO/IEC 27001 certification audit
• ISMS documentation audit
• Conducting an opening meeting
• Communication during the audit
• Audit procedures: observation, document review, interview, sampling techniques, technical verification,
• corroboration and evaluation
• Audit test plans
• Formulation of audit findings
• Documenting nonconformities
• Audit documentation
• Quality review
• Conducting a closing meeting and conclusion of an ISO/IEC 27001 audit
• Evaluation of corrective action plans
• ISO/IEC 27001 Surveillance audit
• Internal audit management program•

• Internal auditors
• Auditors wanting to perform and lead Information Security Management System (ISMS) certification audits
• Project managers or consultants wanting to master the Information Security Management System audit process
• CxO and Senior Managers responsible for the IT governance of an enterprise and the management of its risks
• Members of an information security team
• Expert advisors in information technology
• Technical experts wanting to prepare for an Information security audit function

PECB Certified ISO/IEC 27001 Foundation Certification or basic knowledge of ISO/IEC 27001 is recommended.

• Duration : 3 Hours
• Question format : Essay-type questions
• Exam language : English