Professional Certificate Course, ACI Information Security Manager Diploma

Delivery: Classroom // Duration: 2 Days

This course gives participants an in-depth understanding of the fundamentals for auditing and information security management systems based on ISO 27001 standards and the aviation specific standard EN 16495.

Learning Objectives

• By the end of this course, students will be able to:
• Understand the challenges of auditing an information security management system based on ISO 27001 standards and EN 16495
• Implement an auditing program for ISMS
• Conduct ISMS audits

Target Audience

Persons in charge for

• Information Security Management
• Information Security Risk Management
• Information Security Audits
• IT Security
• IT Security Risk Management
• Information Security Audits
• (Internal) Audits
• Compliance

Course Content

• The guide for the audit of management systems: ISO 19011
• The ISMS audit process
• Roles and responsibilities
• Selection and assessment of auditors
• Planning and implementation of an audit program
• Conducting a single audit (preparation, on-site, documentation, audit report, follow-up)
• Audit methods
• The on-site audit session: Conversation methods
  • Escalation procedures
• Assessment of findings: conformity, effectiveness and efficiency
• Simulation of audit sessions: Auditing the documentation
  • Conducting on-site audits (participants are once auditors, once employees of the audited organization)
  • Preparation of an audit report
• Tips and tricks from the practice
• Mutual exchange of experience

Pre-Requisite for Course Registration

• Should have a good knowledge of information security and/or IT security and a minimum of two years’ experience in the field of information security and/or IT security.
• Recommendation: completed certification to ACI information security manager