Skip to Content
  1. All training
  2. PECB
  3. ISO 27001 Lead Auditor
  4. PECB
Pricelist: - Pricelist
Pricelist: - Pricelist
ISO 27001 Lead Auditor

ISO 27001 Lead Auditor

This intensive 5-day course will enable participants to develop the expertise necessary to manage structures related to information security management systems based on ISO 27001. The training will also allow participants to rigorously understand the best practices used to implement information security controls related to ISO 27002. This training is in accordance with the project management practices established in ISO 10006 (Quality Management Systems – Guidelines for Quality Management in Projects). This course is also aligned with ISO 27003 (Guidelines for the Implementation of an ISMS), ISO 27004 (Measurement of Information Security), and ISO 27005 (Risk Management in Information Security)

0.000 DT 0.000 DT
Contact us
  • Understand the implementation of an Information Security Management System compliant with ISO 27001
  • Acquire a comprehensive understanding of the concepts, approaches, standards, methods, and techniques necessary to effectively manage an Information Security Management System

• Code: ISO 27001 LA

• Duration: 5 days

• Schedule: 9:30 AM – 4:00 PM

• Location: Tunis

• Exam: Included*

• Internal auditors

• Auditors seeking to conduct and lead audits in information security systems

• Project managers or consultants wishing to master information security system audits

• CxOs and managers responsible for IT management in a company as well as risk management

• Members of an information security team

• Expert advisors in information technology Technical experts wanting to prepare for a position in information security

• A basic knowledge of information system security Resources

• Course materials in French

• Course taught in French

• Copy of the ISO 27001 standard

Days 1, 2, 3 & 4

Introduction to the concept of Information Security Management System (ISMS) as defined by ISO 27001

  • Normative, legal, and regulatory framework related to information security

  • Fundamental principles of information security

  • ISO 27001 certification process

  • Detailed presentation of clauses 4 to 10 of ISO 27001

Planning and initialization of a 27001 audit

  • Fundamental principles and concepts of auditing

  • Evidence-based and risk-based audit approach

  • Preparation for an ISO 27001 certification audit

  • Documentary audit of an ISMS

Conducting an ISO 27001 audit

  • Communication during the audit

  • Audit procedures: observation, document review, interviews, sampling techniques, technical verification, corroboration, and evaluation

  • Writing audit test plans

  • Formulation of audit findings and writing non-conformity reports

Closing and following up on an ISO 27001 audit

  • Audit documentation

  • Conducting a closing meeting and end of an audit 27001

  • Evaluation of corrective action plans

  • ISO 27001 surveillance audit and audit management program

Day 5

  • Taking the exam

*Taking the exam on the last day of the training