ISO 28000 Lead Auditor Training in Sheffield

ISO 28000 Lead Auditor Training Course Outline

Module 1: Introduction to Security Management Systems (SeMS)

• Scope
• Normative References
• Terms and Definitions

Module 2: Context of the Organisation

• Understanding the Organisation and its Context
• Understanding the Needs and Expectations of Interested Parties
  • General
  • Legal, Regulatory and other Requirements
  • Principles
• Determining the Scope of the Security Management System
• Security Management System

Module 3: Leadership

• Leadership and Commitment
• Security Policy
  • Establishing the Security Policy
  • Security Policy Requirements
• Roles, Responsibilities and Authorities

Module 4: Planning

• Actions to Address Risks and Opportunities
  • General
  • Determining Security-Related Risks and Identifying Opportunities
  • Addressing Security-Related Risks and Exploiting Opportunities
• Security Objectives and Planning to Achieve Them
  • Establishing Security Objectives
  • Determining Security Objectives
• Planning of Changes

Module 5: Support

• Resources
• Competence
• Awareness
• Communication
• Documented Information
  • General
  • Creating and Updating Documented Information
  • Control of Documented Information

Module 6: Operation

• Operational Planning and Control
• Identification of Processes and Activities
• Risk Assessment and Treatment
• Controls
• Security Strategies, Procedures, Processes and Treatments
  • Identification and Selection of Strategies and Treatments
  • Resource Requirements
  • Implementation of Treatments
• Security Plans
  • General
  • Response structure
  • Warning and communication
  • Content of the security plans
  • Recovery

Module 7: Performance Evaluation

• Monitoring, Measurement, Analysis and Evaluation
• Internal Audit
  • General
  • Internal Audit Programme
• Management Review
  • General
  • Management Review Inputs
  • Management Review Results

Module 8: Improvement

• Continual Improvement
• Nonconformity and Corrective Action

Who should attend this ISO 28000 Lead Auditor?

This ISO 28000 Lead Auditor Course is ideal for individuals with the basic knowledge of management system concepts. It is particularly beneficial for:

• Lead Security Auditor
• Supply Chain Security Manager
• Risk and Compliance Officer
• Logistics and Operations Manager
• Quality and Security Assurance Manager
• Business Continuity and Resilience Specialist
• Security Management System Consultant

Prerequisites ISO 28000 Lead Auditor Training

There are no formal prerequisites to attend this ISO 28000 Lead Auditor Training. 

ISO 28000 Lead Auditor Training Course Overview

ISO 28000 Lead Auditor certification qualifies professionals to assess, audit, and verify the effectiveness of Security Management Systems within global supply chains. It is important because it ensures organisations implement internationally recognised controls to manage security risks, prevent disruptions, and maintain business continuity. For organisations, this training strengthens compliance, reduces vulnerabilities, improves risk awareness, and enhances supply-chain reliability. For individuals, it develops advanced auditing skills, a strong understanding of ISO 28000 requirements, and the ability to evaluate security controls with confidence. From a career perspective, the qualification opens opportunities in auditing, compliance, risk management, and supply-chain security roles across multiple industries worldwide.

During this ISO 28000 Lead Auditor training, delegates will learn how to interpret and apply the requirements of ISO 28000, understand the structure of a Security Management System, and assess organisational risk controls within supply chains. They will gain a solid understanding of auditing methodologies, audit planning, reporting, and follow-up activities based on ISO 19011 principles. The course also covers leadership responsibilities, performance evaluation, corrective actions, and continual improvement.

ISO 28000 Lead Auditor Course Objectives:

• To understand the purpose and structure of ISO 28000
• To interpret Security Management System requirements accurately
• To plan, prepare and conduct internal and external audits
• To collect objective evidence and evaluate compliance
• To identify, classify and document nonconformities effectively
• To prepare professional audit reports and communicate findings

After attending this training, delegates will be able to conduct ISO 28000 audits from planning through reporting and follow-up, assess system effectiveness, and verify corrective actions using recognised audit methodologies. They will be capable of evaluating risks, reviewing security controls, interviewing personnel, presenting audit results to management, and supporting organisations in achieving or maintaining certification.

What’s Included in this ISO 28000 Lead Auditor Course?

• ISO 28000 Lead Auditor Examination
• World-Class Training Sessions from Experienced Instructors
• ISO 28000 Lead Auditor Certificate
• Digital Delegate Pack

ISO 28000 Lead Auditor Exam Information

To achieve the ISO 28000 Lead Auditor Training, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes  
• Open Book/ Closed Book: Closed Book