This course is an ISO/IEC 27001:2022 information security management system lead auditor training course officially authorized by CQI&IRCA, aiming to provide systematic basic training for those who aspire to become lead auditors, systematically master the professional knowledge and practical skills required for the entire process of first-party, second-party and third-party information security management system audits, covering key links such as audit planning, preparation, implementation, report writing and follow-up tracking, and comprehensively improving audit management and execution capabilities.

• Master the core knowledge and basic elements of the information security management system ISO/IEC 27001:2022, recognize the importance of information security, and clarify information security responsibilities
• According to ISO/IEC 27001:2022 standard requirements, use risk assessment results to determine appropriate control measures so that risks reach an acceptable level
• Follow ISO 19011 audit principles to plan-implement-manage-complete information security management system audits
• Through case analysis and practical exercises, master comprehensive information security management methods, continuously reassess information security status and adjust in a timely manner

• Senior management personnel, heads of business departments, heads of functional departments
• Information security management personnel and core team members
• Anyone who needs to audit the organization's information security management system

• Information security management system concepts and ISO/IEC
• Audit concepts
• Role, responsibilities and competence of auditors
• Audit planning
• Audit implementation
• Reporting audit results
• Follow-up measures
• CQI|IRCA certification
• Examination