Information Security Management System Auditor

EITT is a leading provider of IT and business training in Poland with over 15 years of experience. We specialize in modern technologies, management methodologies, and professional skills development.

The training provides a systematic approach to information security in the context of personal data protection, intellectual property, and the National Interoperability Framework. The program includes designing, implementing, and auditing an Information Security Management System according to the requirements of the ISO/IEC 27001:2013 standard and related standards. The course combines theory with practice through workshops and exercises, preparing participants for the role of an ISMS Auditor authorized to conduct external audits.

• Future information security management system auditors
• Information security specialists
• IT and security department managers
• Internal auditors
• Management system consultants
• Compliance department employees
• Individuals responsible for implementing ISMS
• Personal data protection specialists

To educate competent auditors capable of conducting compliance audits with ISO 27001.

• The program ensures the development of practical skills in designing and implementing ISMS.
• The training prepares participants to independently conduct external audits of information security systems.
• The acquired knowledge enables effective management of information security within the organization.
• The ISMS Auditor certificate confirms competencies in auditing management systems.
• Practical workshops guarantee the acquisition of skills to assess the effectiveness of organizational and technical safeguards.

Introduction to information security:

• Information security model
• Security infrastructure and architecture
• Security research methodology
• Legal basis for information protection

Information Security Management System:

-Requirements of the ISO/IEC 27001 standard:

• 2013
• Information classification and management
• Risk management methodology
• Designing security policies

Implementing and maintaining ISMS:

• Selection and implementation of safeguards
• Business continuity management
• Measurement and monitoring system
• ISMS improvement processes

Auditing ISMS:

• Audit methodology
• Security assessment techniques
• Documenting the audit process
• Reporting and post-audit actions

5 days (40h)

• Training materials in electronic form
• Certificate of completion
• Access to the e-learning platform (30 days)
• Trainer support after the training