This course aims to enable participants to master the knowledge and skills required to evaluate and report the consistency and effective implementation of an information security management system (ISMS), so as to protect enterprises from risks. Enterprises that cannot run ISMS strategy coherently and comprehensively may encounter potential security failures.
The purpose of ISO/IEC 27001:2022 Internal Auditor Training is to equip you with the necessary techniques to conduct internal audits of an enterprise's information security management system (ISMS) and help it continuously improve. This training can help you identify and control the risks enterprises face when information security measures fail, and efficiently take means to control risks. Training duration: 2 days.

• Master the knowledge and skills required to evaluate and report the consistency and effective implementation of an Information Security Management System (ISMS)
• Possess the technical ability to conduct internal audits of enterprise ISMS
• Identify and control the risks enterprises face when information security measures fail
• Efficiently take means to control information security risks

• Personnel engaged in information security management work such as information security engineers; middle and grassroots management personnel engaged in enterprise management, internal auditors and other related personnel

• Introduction to ISO/IEC 27001:2022 standard
• Basic definitions and concepts of information security
• ISO/IEC 27000 standard family
• Development history of ISO/IEC 27001 standard
• Basic elements of information security management system
• Clauses of ISO/IEC 27001:2022 standard
• Detailed explanation of information security risk assessment
• Overview and basic concepts of risk management
• Classification and grading of information assets
• Risk identification, risk analysis
• Risk evaluation, risk treatment
• Risk assessment cases and practice
• Establishment of information security management system
• Operation of information security management system
• Performance evaluation of information security management system
• Continuous improvement of information security management system
• Cases of system establishment
• Introduction to control themes
• Introduction to organizational views
• Introduction to information security controls
• Discussion
• Planning and implementation of internal audits
• Introduction to GB/T 19011
• Basic audit knowledge
• Cases and practice
• Examination