89025 APMG ISO/IEC 27001 Full (Foundation + Auditor) 1 year with exam Add to cart

APMG ISO/IEC 27001 Foundation objectives:

• ISO/IEC 27001 scope, purpose and how the standard can be used;
• ISO/IEC 27001 keywords and its definitions;
• The requirements to attain ISO/IEC 27001 certification and the need for perpetual improvement;
• Procedures, their general objectives and high level requirements;
• Applicability and scope definition requirements;
• Use of controls to mitigate IS risks;
• Internal audits and external certification purposes, their operation and terminology;
• The relationship between best practices, ISO/IEC 27001, ISO 9001 and ISO/IEC 20000.

APMG ISO/IEC 27001 Auditor objectives:

• How to audit organizations to identify conformity with ISO 27001
• How to evaluate the principles of risk management - including risk identification, analysis and evaluation
• How to propose appropriate treatments and controls to reduce information security risk, support business objectives and improve information security
• Leading organizations through an audit program
• Directing audit teams
• Evaluating the effectiveness of applied corrective actions to maintain ISMS conformity with ISO 27001

• Resources  who support the implementation, operation and maintenance of an ISMS within an organization;
• Resources to who is required to audit an ISMS and to have knowledge on the standard;
• Resources who work with an internal ISMS, whether the society already has an ISO/IEC 27001 certification or is considering acquiring one;
• Those who wish to acquire or get ready for an ISO/IEC 27001 Practitioner certificate.
• Third-party auditors working for Certification Bodies, responsible for conducting audits which certify organizations against ISO 27001 and ISO 19011
• Internal auditors seeking to understand the specific requirements of auditing Information Security Management Systems needed to confirm that an organization conforms to the ISO 27001 or ISO 19011 standard

APMG ISO/IEC 27001 Foundation contents:

• Introduction, background and terminology;
• Key publications that compose the family of ISO/IEC 27001 standard;
• Leadership and support of an Information Security Management System;
• Planning and managing of an Information Security Management System;
• Goals of control and controls for an Information Security Management System;
• Acquiring ISO/IEC 27001 qualification.

APMG ISO/IEC 27001 Auditor contents:

• Introduction, background and terms
• Audit management, types and activities
• Evidence

To be able to take the exam, it's required to have read and accepted the terms and conditions of the examination institute APMG. The acceptance of such terms and conditions will have to be confirmed when taking the exam.

In order to access ISO/IEC 27001 Auditor exam, it is recommended (not mandatory) that candidates pass ISO/IEC 27001 Foundation certification exam.