|
|
|
|
|
.......................................
Public course
.......................................
Price - HK$12,000 / $10,800*/ $10,800** per person
.......................................
Duration – 28 July – 1 Aug (ENG) / 27-31 Oct
.......................................
Ref : IS/7
.......................................
In-house Option
.......................................
*Discount offer to enrollment made one month before the course commences. |
|
|
|
|
|
IRCA CERTIFIED ISO 27001 INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) LEAD AUDITOR TRAINING (IS/7)
Course Introduction
Information security management systems (ISMS) are intended to provide organisations with the elements of an effective information security system in order to achieve the best practice in information security and to maintain economic goals. ISO 27001 also provides requirements for ISMS to enable an organisation to establish, implement, operate, monitor, review, maintain and improve a documented ISMS within the context of the organisation’s overall business risks. This course will equip delegates with knowledge and skills required to perform audits of information security management systems against the national and international specifications, standards, statutory requirements and regulations.
Course Objectives
a) Explain the purpose of an information security management system (ISMS) and explain the processes involved in establishing, implementing, operating and monitoring, reviewing and improving an ISMS as defined in ISO 27001:2005, including the significance of these for ISMS auditors;
b) Explain the purpose, content and interrelationship of ISO 27001:2005, ISO 27002 and ISO 19011, ISO/IEC TR 13335 Parts 3 and 4 (GNITS), EA 7/03 and the legislative framework relevant to an ISMS;
c) Explain the role of an auditor to plan, conduct report and follow up an ISMS audit in accordance with ISO 19011
Course Content
- Introduction to Information Security Management Systems
- ISO 27001:2005 – Overview and Clauses 4, 5, 6, 7, 8 and Annex A
- Risk Assessment Tools and Techniques
- Processed-Based ISMS
- Accreditation, Certification and Auditor Competence
- Planning, Preparing and Conducting the Audit
Who should attend
Those intending to acquire the competence to audit an organization's ISMS to meet the requirements of ISO 27001:2005, either as third or second party auditor.
Facilitator
SGS ISO 27001 Global Product Manager, IRCA Approved ITSM & ISMS Lead Auditor Course Lead Tutor, itSMF Approved ITSM (ISO 20000/BS 15000) Lead Auditor, USA QuestForum Approved TL 9000 Auditor (V3.0), Founder & Board Member of Chinese Information Security Management Association (CISMA), Founder of Taiwan BS 7799 International User Group (BS 779 IUG) and with a considerable field and theoretical background in IT industry.
Language
The course will be delivered in English with English Materials
Certificate
Delegates who successfully completed the course and passed the continuous assessment & written examination will be issued a Certificate of Successful Completion by IRCA, which designate fulfillment of the training requirements for IRCA ISMS Auditor/Lead Auditor registration.
|
