Security / Governance, Risk & Compliance

Information Security Management System Auditor

The training provides a systemic approach to information security in the context of personal data protection, intellectual property and the National Interoperability Framework. The program covers the design, implementation and auditing of an Information Security Management System according to the requirements of ISO/IEC 27001:2013 and related standards. The course combines theory with practice through workshops and exercises, preparing participants for the role of an ISMS Auditor authorized to conduct external audits.

Issues

ISO 27000 series standards
Information security management
Audit methodology
Risk analysis
Organizational safeguards
Technical safeguards
Incident management
Business continuity
CMS certification
Performance measurements
System documentation
Auditing techniques

Benefits

The program provides development of practical skills for designing and implementing an ISMS
The training prepares you to independently conduct external audits of information security systems
The acquired knowledge enables effective information security management in the organization
The SZBI Auditor Certificate confirms competence in auditing management systems
Practical workshops guarantee the acquisition of skills to assess the effectiveness of organizational and technical safeguards

Who is this training for?

Future information security management system auditors

Information security specialists

Managers of IT and security departments

Internal auditors

Management systems consultants

Employees of compliance departments

Individuals responsible for implementing the SMS

Data protection specialists

Prerequisites

Basic knowledge of management systems
Knowledge of information security
Experience in the IT or security field
Knowledge of audit processes

Training program

Security infrastructure and architecture

Legal basis of information protection
Information Security Management System
ISO/IEC 27001:2013 requirements
Classification and information management

Designing security policies
Implementation and maintenance of the ISMS
Security selection and implementation
Business continuity management
Measurement and monitoring system
Processes for improving the SMS

Methodology for conducting audits

Documenting the audit process
Reporting and post-audit activities

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For Information Security Management System Auditor we recommend: Basic knowledge of management systems; Knowledge of information security; Experience in the IT or security field.

What is the format and duration of this training?

The training lasts 5 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: Future information security management system auditors; Information security specialists; Managers of IT and security departments.