IRCA/CQI Certified ISO/IEC 27001:2022 Lead Auditor: Practitioner Package

Date(s): Multiple dates are available, submit your registration here.	Enquiry: Email to training@aais.org.sg
Time: 9am – 5pm (UTC +8)	Closing Date: One week before course date.
Venue: Virtual instructor-led training (VILT) via Zoom / MS Team	Fees: AAIS Member: S$3,379/pax w/GST Public: S$3,597/pax w/GST Fees reflected are inclusive of 9% GST (in 2024).
About the Course:
Auditing is crucial to the success of any management system. As a result, it carries with it heavy responsibilities, tough challenges and complex problems. This five-day intensive course trains ISMS auditors to lead, plan, manage and implement an Audit Plan. It also empowers them to give practical help and information to those who are working towards certification and also provides the knowledge and skill required to carry out 2nd party auditing (suppliers and subcontractors). This package is a structured learning pathway that combine carefully selected courses with rigorous asessements that guarantee their relevance. In this practitioner package, it includes: – 4 hours on-demand eLearning ISO/IEC 27001 ISMS requirements training course (available 24/7, complete flexibility and time-efficient) and; – 5 days CQI and IRCA ISO/IEC 27001 ISMS lead auditor training course (virtual instructor led training)
Who Should Attend?
This course is suitable for those wishing to Lead audits of ISMS in accordance with ISO 27001:2022 (either as a 2nd party, or 3rd party auditor), those wishing to learn about effective audit practices. Security and quality professionals, existing information security auditors who wish to expand their auditing skills and consultants who wish to provide advice on ISO 27001:2022 ISMS Auditing. Prerequisites Delegates are expected to have the following prior knowledge: *a. Management systems* Understand the Plan-Do-Check-Act (PDCA) cycle b. Information security management Knowledge of the following information security management principles and concepts: – Awareness of the need for information security – The assignment of responsibility for information security – Incorporating management commitment and the interests of stakeholders – Enhancing societal values – Using the results of risk assessments to determine appropriate controls to reach acceptable levels of risk – Incorporating security as an essential element of information networks and systems – The active prevention and detection of information security incidents – Ensuring a comprehensive approach to information security management – Continual reassessment of information security and making of modifications as appropriate *c. ISO/IEC 27001* Knowledge of the requirements of ISO/IEC 27001 (with ISO/IEC 27002) and the commonly used information security management terms and definitions, as given in ISO/IEC 27000
Course Content:
a) Explain the purpose and business benefits of: – Information Security Management Systems (ISMS), ISMS standards – Management system audit – Third-party certificationb) Explain the role of an auditor to plan, conduct, report and follow up an Information Security MS audit in accordance with ISO 19011 (and ISO 17021 where appropriate)c) Have the skills to: Plan, conduct, report, and follow up an audit of an ISMS to establish conformity (or otherwise) with ISO/IEC 27001/2, ISO 19011 (and ISO 17021 where appropriate)


*Note: AAIS reserves the right to adjust the course pricing and to re-schedule or cancel any course due to unforeseen circumstances, course commencement is subject to minimum class size requirements.

Jointly Organised By: