ISO/IEC 27001:2022 - Certified Lead Auditor

Certification Overview

ISO/IEC 27001:2022 - Certified Lead Auditor

Exam Code: ISO-CLA-22

With ISO 27001 : 2022 Information Security Management Systems - Certified Lead Auditor certification you can demonstrate to existing and potential customers, suppliers and shareholders the integrity of your data and systems and your commitment to information security. It can also lead to new business opportunities with security-conscious customers; it can improve employee ethics and strengthen the notion of confidentiality throughout the workplace. It also allows you to enforce information security and reduce the possible risk of fraud, information loss and disclosure. There are three core principles involved in ISO 27001:2022 ISMS confidentiality, integrity and availability, which cover eleven areas:

  • Security policy;
  • Organisation of information security;
  • Asset management;
  • Human resources security;
  • Physical and environmental security;
  • Communications and operations management;
  • Access control;
  • Information systems acquisition, development and maintenance;
  • Information security incident management;

e-Competence Framework (e-CF)

The mapping of this certificate against the e-Competence Framework. To know more on e-Competence Framework (e-CF) visit, ECF



Exam Information

The exam comprises of 50 Multiple Choice Questions out of which the candidate needs to score 70% (35 out of 50 correct) to pass the exam.

The total duration of the exam is 1 hour (60 Minutes).

  • The exam is delivered through ProctorU in a proctored mode. With a webcam and a reliable internet connection, exam can be taken anytime and anywhere.
  • Upon purchasing the Premium Package or an Exam Voucher Code, a voucher code with two attempts will be assigned to your login profile.
  • The Exam Voucher included in the Premium Package or purchased separately is valid for two (2) attempts. If you are unable to pass the exam within these two attempts, you can purchase a new voucher code, which will grant you an additional two attempts.

The ISO/IEC 27001:2022 - Certified Lead Auditor Certificate is valid for life

N/A

ISO/IEC 27001:2022 - Certified Lead Auditor Certification has no prerequisites.

Course Outline

Module 1 - Foundation

  • Introduction to Cyber Security
  • Seveity of Security Breaches
  • Hacker Tools
  • Sources of Transmission
  • Regulatory Challenges
  • Vulnerable Businesses
  • Cost of Cyber Attacks
  • System Threat and Vulnerability
  • Fundamental Access Controls
  • Assurance Authentication
  • Functionally Base Measure
  • CIA Model
  • Control Objective
  • Information Security
  • NIST standard introduction
  • Cyber Security Framework
  • Improving Cyber Security Programming
  • Designing IT Governance
  • ISO Management needs

Module 2 - ISMS Requirements

  • Context
  • Needs and Expectations
  • Scope of ISMS
  • Leadership and Commitment
  • Leadership
  • Information Security Policy
  • Organizational Roles
  • General Aspects
  • Information Security Risk Assesment
  • Competance ISMS
  • Awareness ISMS
  • Communication Sources
  • Information Risk Security Assessment
  • Operation of ISMS
  • Operation Control and Planning
  • Monitoring measurement analysis
  • Management Review
  • Corrective and Improvement

Module 3 - Information Security Operations Controls

  • Information Security Controls
  • ISO 27001 Operation Controls
  • Information Security Policies
  • Policies for Information Security
  • Information Security in Project Management
  • Internal Organization
  • Organization of Information Security
  • Human Resource Security
  • Disciplinary Process
  • Infomrmation Security Awareness
  • Management Responsibilities
  • Asset Management
  • Information Classification
  • Handling Assets
  • Labeling of Information
  • Media Handling
  • Management Removable Media
  • Access Controls
  • User Access Management
  • User Registration
  • Information Security Policies

Module 3.1 - Information Security Operations Controls

  • Access Control Programme
  • Password Management System
  • System and Application Access
  • Cryptography
  • Policy on Use of Cryptography
  • Delivery and Loading Areas
  • Physical Entry Controls
  • Protecting against External
  • Securing Offices
  • Working in Secure Areas
  • Equipment Siting and Proctection
  • Cabling Security
  • Equipment Maintenance
  • Security of Equipment
  • Supporting Utilities
  • Operating Security
  • Capacity Management
  • Logging and Monitoring
  • Protection of Log Information
  • Control of Operational Software
  • Physical Security Perimeter
  • Working in Secure Areas
  • Delivery Loading Areas
  • Clear Desk Policy
  • Equipment Maintenance
  • Restriction on Software Installation
  • Unattended User Equipment
  • Information Audit Controls
  • Communications Security
  • Segregation in Networks
  • Information Tester

Target Audience

  • Quality professionals with experience in implementation and auditing of information Security Management Systems (ISMS)
  • Existing security auditors who wish to expand their auditing skills
  • Consultants who wish to provide advice on ISO/IEC 27001:2022 systems certification
  • Security and Quality professionals
  • Information Security Consultants
  • Those wishing to implement a formal Information Security Management System (ISMS) in accordance with ISO 27001:2022.

Registration Process for E-Course or E-Book and Exam

Premium Package
(E-Course Version)

  • Self Explanatory
  • Valid for 40 days
  • This package provides a voucher code granting eligibility for two (2) exam attempts.
  • Includes E-certificate and Digital Badge if you qualify in the exam.
  • Course Duration: 38 Days
  • Price: 200 USD

Exam
Voucher

  • Validity: 240 Days
  • Price: 190 USD
  • Please Read Carefully:

    1) The Exam Voucher is valid for two (2) attempts.

    2) You will receive your voucher code within 24 business hours.

    3) You can schedule your exam through ProctorU.

Exam Registration

  • To Register for an Exam
Click Here