Integrated ISMS & QMS Auditor Training Course

Information Security has evolved to become an essential part of everyday business. Breaches of information security not only affect a business’s brand and reputation, but it can also impact on day to day operations (including meeting customer requirements) and carries legal implications that frequently lead to companies being fined for breaching data protection. This, in addition to GDPR, means there is a stronger need for stricter information security practices in companies than ever before.

As Internal auditing is one of the fundamental activities for maintaining and improving a Management System, the internal auditor plays a highly important role in determining the effectiveness of an organisation’s information security processes. This two-day Integrated  Information Security Management System (ISMS) & Quality Management System (QMS) Auditor training course is designed to provide students with an understanding of ISO 27001 and Information Security, both from an implementation and auditing perspective, so that they can incorporate information security criteria into their existing Quality Management System audits.

This Integrated ISMS & QMS Auditor Training Course is highly suitable for:

• existing 1st, 2nd and 3rd party QMS auditors looking to expand their knowledge to be able to incorporate Information Security within their QMS audits
• staff who will be involved in performing ISMS Internal Audits
• managers responsible for Information Security within their department or organisation

• Introduction to Information Security and Information Security Management Systems
• Integrating Information Security criteria into Quality Management System audits
• Integrating Information Security into an existing QMS
• ISO 27001 Requirements
• ISO 9001:2015 clauses that relate to the management of
  information security
• The Integrated Management System Internal Audit Process
  • Planning the audit (including QMS/ISMS checklist)
  • Conducting an integrated QMS/ISMS audit
  • Reporting, including non-conformity statements
  • Follow-up

Encompassing study, workshops and case studies, the course agenda will be similar to the following format.

• Day 1
  • WELCOME AND INTRODUCTION
  • Module 1 Introduction to Information Security
  • Module 2 Information Security Management Systems
  • Workshop 1 ISO/IEC 27001:2022 – Annex SL
  • Workshop 2 ISO/IEC 27001:2022 – Annex A
  • Module 3 ISO 9001 vs. ISO 27001
  • Module 4 Integrating Information Security into a QMS
  • Module 5 Incidents vs. Nonconformities
  • Module 6 Risks & Opportunities
  • Workshop 3 Risk Assessment
  • Module 7 The Audit Process
  • Workshop 4 Case Study: SBS
  • Workshop 4 (cont.) Preparing to Audit
  • CLOSE
• Day 2
  • Day 1 Review
  • Workshop 5 ISMS Process Audits
  • Workshop 5 (cont.) Review of Checklists
  • Workshop 6 Case Study: SBS
  • Workshop 7 Audit Review
  • Workshop 8 Nonconformity and all Post-NC Action
  • Module 8 Horror Stories and Coping Strategies
  • Course Summary
  • CLOSE