Module 1: Introduction to Information Security Management Systems

• Concepts of confidentiality, integrity, and availability
• Information security threats and vulnerabilities
• Purpose and benefits of an ISMS
• Overview of ISO/IEC 27001:2022
• Relationship with other ISO standards

Module 2: Overview of ISO/IEC 27001 Requirements

• Context of the organization
• Leadership and commitment
• Planning actions to address risks and opportunities
• Support and resources
• Operational controls
• Performance evaluation
• Improvement requirements

Module 3: Risk Management in ISO/IEC 27001

• Information security risk assessment
• Risk treatment process
• Risk acceptance and residual risk
• Statement of Applicability (SoA)
• Selection of Annex A controls

Module 4: Annex A Controls

• Organizational controls
• People controls
• Physical controls
• Technological controls
• Control implementation examples

Module 5: Audit Principles and Guidelines

• Audit principles according to ISO 19011
• Auditor competence and ethics
• Audit objectives, scope, and criteria
• Audit methods and sampling techniques
• Risk-based auditing approach

Module 6: Planning an ISMS Audit

• Preparing audit plans and checklists
• Reviewing documented information
• Identifying audit trails
• Preparing working papers
• Assigning audit team responsibilities

Module 7: Conducting the Audit

• Opening meeting
• Interviewing techniques
• Collecting and verifying evidence
• Identifying conformity and nonconformity
• Writing audit findings
• Closing meeting

Module 8: Audit Reporting and Follow-Up

• Preparing audit reports
• Categorizing nonconformities
• Root cause analysis
• Corrective action verification
• Follow-up audits

Module 9: Lead Auditor Skills

• Managing an audit team
• Resolving conflicts during audits
• Communicating effectively with auditees
• Time management during audits
• Leading multi-site and remote audits

Module 10: Workshops and Examination Preparation

• Audit case studies
• ISMS audit simulations
• Writing nonconformity statements
• Practical exercises and group discussions
• Mock examination