Skip to main content

In January SAFEWAY in partnership with BSI held the 1st Training of Training of Lead Auditor in Information Security Management System ISO / IEC 27001: 2013 - IRCA.

The training had a 40-hour workload and was aimed at professionals involved with the implementation and management of Information Security Management Systems, consultants and auditors in Information Security Management System ISO 27001: 2013 and ISO 27002: 2013. On the fifth day of the training, the written exam for the Training of Lead Auditors ISO 27001: 2013 IRCA is carried out and the participants who had 100% attendance and minimum required score will earn the certification IRCA - (International Register of Certificated Auditors).

A great accomplishment for the SAFEWAY team!

The training was attended by ten employees who committed themselves to the classes and study of the content and eagerly await the result to celebrate again, this time for certification.

Learn more about the content of the training Training of Lead Auditor in Information Security Management System ISO / IEC 27001: 2013 - IRCA

Goals:

Present what are the objectives and benefits of an Information Security Management System, Information Security standards and audits by second and third parties.

What is the role and applicable audit techniques in the planning, conducting, reporting and follow-up of Information Security Management System audits in accordance with ISO / IEC 27001: 2013, ISO / IEC 27002: 2013, ISO 19011: 2011 guide for Management System audits and when applicable, ISO17021: 2011,

Requirements for audits of a management system for certifying bodies.

Train Leading Auditors in Information Security Management System ISO / IEC 27001: 2013.

IRCA certified training * guidelines, our instructors will teach you how to lead, plan, conduct and report an audit in the Information Security Management System ISO 27001: 2013 in organizations.

This training aims to provide necessary knowledge and develop the skills of the participants with regard to leading an audit team and conducting internal and third party audits in the Information Security Management system, through a combination of practical exercises, study case studies and simulations.

This is a training certified by IRCA - (International Register of Certificated Auditors) that meets the training requirements for students interested in certification as a Lead Auditor in Information Security Management System.

The course schedule, workload and administration are certified by IRCA.

This training lasts for 05 days and includes an exam of 02 hours / class.

* IRCA Certified Course (A17287)

Content:

• Objectives and Benefits of an Information Security Management System
• First, Second and Third Party audits
• Process audit:
• Objectives, Scope and Criteria
• Resources
• Roles and Responsibilities & Confidentiality
• Audit methods
• Stages 01 and 02
• Audit plan
• Documentation
• Opening meeting
• Audit Evidence
• Effective Communication
• Opening and closing meeting
• Audit reports
• Follow up audit
• Auditing techniques applied to ISO 27001: 2013
• Managing and Leading a team of ISO / IEC 27001: 2013 Auditors
• Conducting ISO 27001: 2013 Audit Audits
• Terminology
• PDCA
• Contextualization: Information Security Management System
• Auditor's role
• Documentation of the Information Security Management System
• Starting the Audit
• Documentation review
• Audit plan
• Work Documentation
• Opening meeting
• Comments
• Auditing Senior Management
• Auditing “Context”
• Auditing Actions
• Questions and Evidence
• Auditing: Objectives, Resources and Competence
• Operations and Monitoring
• Continuous improvement
• Unconformities
• Audit report
• Follow up audit
• Simulated exam
• Job Delivery: Audit Report
• The Certification and Accreditation Process, the Role of IRCA, Requirements for certification as an Information Security Management System auditor and Code of Conduct.
• Final review
• Exam

Who is it for:

• Professionals involved with the implementation and management of Information Security Management Systems, consultants and auditors in Information Security Management System ISO 27001: 2013 and ISO 27002: 2013.

Note:

On the fifth day of the training, the written exam for the Training of Lead Auditors ISO 27001: 2013 IRCA is performed.

To be approved in this course the student must have 100% attendance.

Passing certificates are provided to students who obtain the minimum score necessary to pass the theoretical exam and continuous assessment. Participants who do not reach the minimum average will receive a certificate of participation.

Prerequisites:

Participants in this training must have prior knowledge of the Management System, requirements of the ISO 27001: 2013 standard. For students who do not have it, we recommend participating in a previous training on Interpreting the Requirements of ISO27001: 2013.

 

Regarding the [SAFEWAY]

SAFEWAY is an Information Security company, recognized by its customers for offering high value added solutions through Information Security projects that fully meet business needs. During these years of experience, we have proudly accumulated several successful projects that have earned us credibility and prominence in our clients, which constitute in large part the 100 largest companies in Brazil.

Today through more than 17 strategic partnerships with global manufacturers and our SOC, SAFEWAY is considered a one stop shopping with the best technology solutions, processes and people.

Let's make the world a safer place to live and do business!