Course overview
Course overview
This programme supports professionals who need to audit information security management systems and evaluate governance evidence with confidence.
Participants will learn
- How to plan ISMS audit activity
- How to evaluate information security evidence
- How to report findings that support improvement
Who should attend
Designed for the teams who need this capability in practice.
- Information security auditors
- Internal auditors
- Risk and compliance professionals
Learning outcomes
What participants should be able to do next
- Plan and conduct ISMS audits with a risk-based mindset
- Assess security governance, controls, and evidence
- Communicate audit findings and corrective actions clearly
Course outline
Topics covered
Module 1
ISMS audit principles and planning
Module 2
Security controls and governance evidence
Module 3
Interviewing, testing, and evidence evaluation
Module 4
