ISO 27001 Audit: Information Security

TEACHING UNIT 1. Fundamentals of ISO 27001 Origin and Evolution of the ISO 27001 Standard Importance of Information Security in Organizations High-Level Structure (HLS) of ISO Standards Relationship Between ISO 27001 and Other Related ISO Standards (ISO 27002, ISO 22301, etc.) Key Concepts: Confidentiality, Integrity, and Availability LEARNING UNIT 2. Information Security Management Systems (ISMS) and the Use of ISO 27001 Definition and Scope of the ISMS General ISMS requirements according to ISO 27001 Information security policies Definition and management of assets in the ISMS Risk management: identification, assessment, and treatment TEACHING UNIT 3. Context and Planning of the ISMS Identification of the organization’s internal and external context Stakeholders and applicable requirements Analysis of risks and opportunities Establishment of information security objectives Planning to achieve the established objectives LEARNING UNIT 4. Leadership and Commitment in the ISMS Role and responsibilities of top management in the ISMS Establishing an information security policy Assigning roles and responsibilities for information security Promoting a culture of security within the organization LEARNING UNIT 5. ISMS Support and Resources Resource requirements for ISMS implementation Competence and training of involved personnel Internal and external communication in the ISMS ISMS documentation: Types of documents and requirements Control of documented information TEACHING UNIT 6. ISMS Operation Planning and Operational Control in Information Security Implementation of Controls According to Annex A of the ISO 27001 Standard Information Security Incident Management Incident Response and Recovery Plans Evaluation of Vendors and External Services LEARNING UNIT 7. ISMS Performance Evaluation ISMS Monitoring and Measurement Internal Audits: Planning, Execution, and Results Key Performance Indicators (KPIs) in Information Security Analysis of Nonconformities and Corrective Actions Management Review of the ISMS LEARNING UNIT 8. ISO 27001 Certification Certification Process: Phases and Requirements Roles and Responsibilities During the External Audit Relationship Between the Internal Audit and Certification Maintenance and Renewal of the ISO 27001 Certificate LEARNING UNIT 9. Technical Tools for ISMS Auditing Risk Management and Regulatory Compliance Software Techniques for Conducting Penetration Testing (Pentesting) Vulnerability Assessment in the ISMS Environment Use of Log Monitoring and Analysis Tools Automation in Information Security Auditing TEACHING UNIT 10. How to Conduct an ISO 27001 Audit Introduction to Auditing Audit Planning Conducting the Audit Evaluation and Analysis of the ISO 27001 Audit Audit Report Review and Approval of the Report