Description This BSI course, “ISO 27001:2005 – Information Security Management System Lead Auditor”, teaches students the fundamentals of auditing information security management systems to ISO 27001:2005. This five-day intensive course trains students on how to conduct audits for certification bodies and facilitate the ISO 27001:2005 registration process. The auditing exercises and lectures are based on ISO 19011:2002, “Guidelines for Quality and/or Environmental Management Systems Auditing.”
The course is designed specifically for those people who wish to conduct external assessments or internal audits to ISO 27001:2005, although students will also gain the knowledge and understanding necessary to give practical help and information
to other individuals and organizations working toward conformance to
the standard.
This course is certified (A17287) by the International Register of Certified Auditors (IRCA) and meets the training requirements for those seeking registration as a lead auditor under their ISMS scheme.
Larry Whittington is the instructor
for all the highlighted classes.
Audience This course is intended for IT Security Officers, IT Managers, Auditors interested in ISO 27001:2005 or ISO 17799:2005, and Information Security Consultants.
Learning Objectives
Review the Requirements of ISO 27001:2005
Understand Relationship of ISO 27001:2005 and ISO 17799:2005
Learn How to Assess Security Threats and Vulnerabilities
Understand Security Controls and Countermeasures
Understand the Roles and Responsibilities of the Auditor
Learn How to Plan, Execute, Report, and Follow-up on an ISMS Audit
Duration The course is taught as a five-day class.
Class Hours Monday: 8:00 AM - 5:30 PM
Tuesday: 8:00 AM - 6:00 PM
Wednesday 8:00 AM - 6:00 PM
Thursday: 8:00 AM - 6:00 PM
Friday: 8:00 AM - 12:30 PM
The instruction, course duration, exam, content, and administration are regulated by IRCA,
and Day 5 includes
a 2 hour exam. Attendees should note that the course does require evening work.
Fee The class is $2495 per student. To confirm your enrollment, pre-payment will be required.
Materials Students receive comprehensive course manuals with reference materials, including copies of ISO 27001:2005, ISO 17799:2005, and ISO 19011:2004.
Prerequisite A prior review of ISO 17799:2005 and ISO 27001:2005 and knowledge of information security practices is required.
Logistics
There is a two-hour written exam on Day 5. Detailed exam instructions are provided during the course. Certificates of achievement are provided for students who exceed a 70% on both the continual evaluation and the exam. Certificates of attendance are provided to those who choose not to take the exam or do not pass. All certificates are provided within 6 weeks of course completion. The student-to-instructor ratio is 10:1 or less.
Contact If you have any questions about this course,
please call us at 770-517-7944 or send an e-mail to Larry@WhittingtonAssociates.com.