ISO 27005 Internal Auditor - United Kingdom

ISO 27005 Internal Auditor Course Outline

The following subjects will be taught during this course:

Module 1: Introduction to ISO 27005 Standard

• Core concepts, key definitions and background
• Quality Management System (QMS)
• Role and importance
• Understanding the situation in an organisation
• Reviewing and monitoring
• Octave method
• EBIOS method
• MEHARI
• Harmonised Tra method

Module 2: Interaction With Other ISOs

• How ISO 27005 interacts with ISO 9001
• How ISO 27005 interacts with ISO 27001
• Quantifying the business impact
• Impact severity

Module 3: Planning Individual Internal Audits

• Internal audit approach
• Risk assurance mapping
• Audit plan
• Research the audit area
• Conduct process walk-throughs
• Map risks to the organisation, process, or function
• Obtain data prior to fieldwork

Module 4: Conducting the Internal Audit and Handling the Interview Process

• Decide what you want to achieve
• Identify risks and review objectives
• Plan and audit activities
• Validate the facts and complete the work
• Develop a deliverable or report that will drive action
• Follow up

Module 5: Understanding Quality Management Principles in an Internal Audit

Module 6: Preparation of an ISO 27005 Audit

Module 7: Conducting an ISO 27005 Audit

Module 8: Closing an ISO 27005 Audit

Module 9: Managing an ISO 27005 Audit Program