Course Aim
This course provides delegates with fundamental knowledge of assessment skills that will add value to organizations. This course complies with PR 320 criteria. Successful completion of the course fulfils the formal training requirement for individuals seeking Third Party Assessments.
Course ID
2056
How will you benefit?
Knowledge of the following information security management principles and concepts:
- The Plan, Do, Check, Act (PDCA) cycle.
- The core elements of a management system and the interrelationship between top management responsibility, policy, objectives, planning, implementation, measurement, review, and continual improvement.
- Awareness of the need for information security;
- The assignment of responsibility for information security;
- Incorporating management commitment and the interests of stakeholders;
- Enhancing societal values;
- Using the results of risk assessments to determine appropriate controls to reach acceptable levels of risk;
- Incorporating security as an essential element of information networks and systems;
- The active prevention and detection of information security incidents;
- Ensuring a comprehensive approach to information security management;
- Continual reassessment of information security and making of modifications as appropriate.
- Knowledge of the requirements of ISO/IEC 27001 (with ISO/IEC 27002) and the commonly used information security management terms and definitions, as given in ISO/IEC 27000, which may be gained by completing CQI and IRCA Certified ISO/IEC 27001:2022 Foundation (ISMS) Training course or equivalent.
Course Content
- Auditing Process Approach, incorporating the PDCA Cycle Auditing ISO/IEC 27001:2022 Standard requirements
- Documentation for Information Security Management Systems Auditing
- ISO 19011 standard requirements for auditing
- Auditor's Auditing Roles and Responsibilities
- Audit Planning- Audit Strategy
- Checklists and Non-Compliance Reports
- Reporting on Audits
- Meeting of the Final Team / Follow-up
- Audit / Verification Records
- Accreditation / Certification, as well as Auditor Registration
- Exercises, case studies, and so on
- Examining the course
- Auditor Registration and Accreditation
PDCA Cycle

Who Should Attend This Course?
Anyone who is or aspires to be:
- A Third-Party Assessor or Lead Assessor of ISO/IEC 27001:2022
- Responsible for undertaking audits of suppliers/subcontractors as per ISO/IEC 27001:2022
- Responsible for implementing internal audits and audit programs as per ISO/IEC 27001:2022
- Responsible for implementing the ISO/IEC 27001 series of standards
Course Outline
The course starts at 0830 hrs. and ends approximately at 1800 hrs. Maximum attendance 10 delegates per tutor.
Lunch Break:- 45 min.
Coffee Breaks:- Mid-morning & Mid-afternoon (Max. 10 min. each)
Pre-course information is sent to delegates approximately a week prior to the beginning of the course
Course Facilitators
All course facilitators are highly qualified and experienced both in training and assessment of Information Security Management System. We strongly believe that the experience in Information Security Management System Assessment and Training skills is a right combination to deliver a practical training course. They are selected on their ability to make BSCIC courses both practical and enjoyable.
Our training sessions are available in both virtual and on-site formats to meet your unique preferences.
Pre-Course Knowledge (Recommended)
- Basic understanding of management system principles and the Plan-Do-Check-Act (PDCA) cycle
- Familiarity with the structure and key concepts of the relevant ISO standard
- Awareness of process-based approaches and management system terminology
- Prior exposure to auditing activities (e.g., internal audits) is preferable
- Graduation and 1–2 years of work experience in a relevant field (preferred but not mandatory)
- Completion of a Foundation Course is recommended (though not mandatory) and may also be achieved through self-study