ISO 27005 Internal Auditor - United Kingdom

ISO 27005 Internal Auditor Course Outline

The following subjects will be taught during this course:

Module 1: Introduction to ISO 27005 Standard

• Introduction
• Concepts, Key Definitions, and Background
• Quality Management System (QMS)
• Information Security Risk Management
• Role and Importance
• Understanding the Situation in an Organisation
• Reviewing and Monitoring
• Octave Method
• EBIOS Method
• MEHARI
• Harmonised TRA Method

Module 2: Interaction with Other ISO

• How ISO 27005 Interacts with ISO 27001?
• Quantifying the Business Impact
• Impact Severity

Module 3: Planning Individual Internal Audits

• Internal Audit Approach
• Risk Assurance Mapping
• Audit Plan
• Research the Audit Area
• Conduct Process Walk-Throughs
• Map Risks to the Organisation, Process, or Function
• Obtain Data Prior to Fieldwork

Module 4: Conducting Internal Audit and Handling the Interview Process

• Identify Risks
• Plan and Audit Activities
• Validate the Facts and Complete the Work
• Develop a Deliverable or Report that will Drive Action
• Follow Up

Module 5: Understanding Risk Management in an Internal Audit

• Introduction
• Risk Management Process

Module 6: Preparation of an ISO 27005 Audit

• Define Audit Objectives and Scope
• Select Audit Criteria
• Establish Audit Teams
• Develop Audit Plan

Module 7: Conducting an ISO 27005 Audit

• Risk Management Process
  • Context Establishment
  • Risk Assessment
  • Risk Treatment
  • Risk Acceptance
  • Risk Communication and Consultation
  • Risk Monitoring and Review

Module 8: Closing an ISO 27005 Audit

• Prepare Audit Report
• Distribute Audit Report
• Conduct Audit Follow-up

Module 9: Managing an ISO 27005 Audit Program

• Know What and When to Audit
• Create an Audit Schedule
• Pre-Planning the Scheduled Audit
• Conducting the Audit
• Record the Findings
• Report Findings

Who should attend this ISO 27005 Internal Auditor Course?

The ISO 27005 Internal Auditor Course is designed to provide professionals with the knowledge and skills necessary to conduct internal audits of Information Security Management Systems (ISMSs). The following professionals can benefit greatly from this ISO 27005 Certification Course:

• Information Security Managers
• Information Security Officers
• Internal Auditors
• Risk Managers
• Compliance Officers
• Security Engineers
• Security Analysts

Prerequisites of the ISO 27005 Internal Auditor Course

There are no formal prerequisites for this ISO 27005 Internal Auditor Course.

ISO 27005 Internal Auditor Course Overview

The ISO 27005 Internal Auditor course offers comprehensive training on auditing information security management systems (ISMS) based on the ISO 27005 standard. This course is integral for ensuring that organisations can effectively manage and mitigate information security risks, a crucial aspect in maintaining confidentiality, integrity, and data availability in today's digitally driven environment.

This course is crucial for IT professionals, internal auditors, and information security personnel tasked with the internal audit function within their organisation. Proficiency in ISO 27005 ensures their organisation's ISMS aligns with international standards, enhancing security measures and compliance.

This 2-days course is designed to equip delegates with the knowledge and skills to perform internal audits on information security management systems guided by ISO 27005. Participants will learn through a blend of theoretical knowledge and practical exercises, enabling them to understand the audit process from initiation to closure, including conducting follow-up actions to ensure continual improvement.

Course Objectives

• To understand the roles and responsibilities of an ISO 27005 internal auditor
• To grasp the concepts, approaches, standards, methods, and techniques allowing effective management of an ISO 27005 audit program
• To acquire the expertise to perform an ISO 27005 internal audit, following the audit process from planning and preparation to audit report and follow-up
• To develop the ability to assess an organisation’s information security risk management practices against ISO 27005 criteria
• To enhance skills in managing an audit team, communicating with stakeholders, and resolving conflicts

After completing this course, delegates will receive an ISO 27005 Internal Auditor certification, evidencing their ability to conduct insightful and effective internal audits within their organisations. This certification empowers individuals to exceed international standards in information security risk management within their organisation.

What’s included in this ISO 27005 Internal Auditor Course?

• ISO 27005 Internal Auditor Examination
• World-Class Training Sessions from Experienced Instructors 
• ISO 27005 Internal Auditor Certificate
• Digital Delegate Pack

ISO 27005 Internal Auditor Exam Information

To achieve the ISO 27005 Internal Auditor, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice  
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes
•  Open Book/ Closed Book: Closed Book