Hi, my name is Nathalie Klaas. I'm from Belgium and I have my own company in Belgium. Where I help organizations with the implementation of ISO 27001 and ISO 9001. Besides the implementation um projects that I do. I'm also an external lead auditor for ISO 27001 and ISO 9001. Besides my work for customers, I also teach at university and of course for people This training course is intended to help participants strengthen their knowledge and skills which help them when auditing an ISMS. So from an educational perspective, competence consists of the following three elements, knowledge, skill, and behavior. So we will be working on all three of them. By the end of the course, you will be able to explain the fundamental concepts and principles of competence. An information security management system based on ISO 27001. You will be able to interpret the ISO 27001 requirements for an ISMS from the perspective of an auditor You will be able to evaluate the ISMS conformity to ISO 2701 requirements in accordance with the fundamental audit concepts and Principles, you will be able to plan, conduct and close an ISO 2701 compliance audit, and you will be able to manage an ISO 27001 audit program. In section one, we will be talking a little bit how the training is structured, what are the objectives of the structure, and of course we will talk a little bit about the examination and certification. alongside with some explanation about PECB. Now this course is really intended to help you to be able to conduct an ISO 27001 audit. So by the end of the training course you will be able to explain and understand the fundamental concepts and principles of an information security management. System based on the ISO 27001. You will also be able to interpret the ISO 2701 requirements from an ISMS from the perspective of an auditor You will be able to evaluate those requirements in accordance with the fundamental audit concepts and principles. You will be able to plan, conduct, and close an ISO 27001 compliance audit in accordance with the ISO 17021-1 requirements, ISO 1911 guidelines, and other best practices of auditing. And finally, you will be able to manage an ISO 27001 audit program. From an educational perspective, competence consists out of knowledge, skills, and behavior. So we will be working on those three elements throughout the course. The training course for an ISO 27001 lead auditor is intended for both internal and external auditors. The necessary competences for internal and external auditors are common throughout all types of audits. The characteristics of the different types of audits will be explained during this training course. Internal audits will be discussed in a dedicated section in the last day. The objectives of this training course is to really help you to acquire that knowledge on audit techniques and not acquire expertise in information. security management. However, basic knowledge of information security management concepts is necessary to be able to conduct a successful audit. Now when going through the course, we will do a couple of notes, you will get a lot of examples, you will be able to do a lot of um readings as well so when you want to have some little bit more information because this is an online course of course you will not be able to have discussions with the participants But you can find additional information on the PECB website, where you can find additional worksheets, additional articles and toolkits where you can find a lot of information that will help you Grow your knowledge even further. This training course has been created when looking at the best practices in a couple of areas So the course is really based on ISO 1911, which provides guidelines on auditing management systems, including the principles of auditing. ISO 1911 also talks about how you should manage an audit program and how you should conduct management system audits, as well as guidance on the evaluation of the competence of individuals that are involved in that audit. process. So it applies to all organizations that wish to conduct both internal and external audits. We also had a look at the International Federation of Accountants This is a global organization which is focused, as the name states, for accountant. It operates in more than 130 countries with over more than 175 members and associates to protect public interest by encouraging the use of best practices in accounting. So standards developed by the IFAC provide guidance in the following fields, so it's audit, insurance, control and services related to quality, training, ethics and accounting. We also use the Institute of Internal Auditors. This is a global organization that advocates, educates, and connects internal auditors worldwide. It also develops international guidance almost exclusively for those internal audits. This guidance is based on careful analysis consultation and the fundamental principles concerning the performance of internal audit services by members of the Institute of Internal Auditors. And lastly, we also had a look at the generally accepted auditing standards, which are auditing standards developed by the American Institute of Certified Public Accountants including general standards, standards by activity sector and reporting standards with interpretation. So you see we have based the content of the course of a lot of worldwide best-known best practices To include it in the training course. Now, when talking about the exam, after you've completed the full e-learning course, you will be able to take an exam. The exam will be focused on the seven competency domains that We will be talking about throughout the course. So let me walk you through the seven competency domains. First of all, there will be questions about the fundamental principles and concepts of an information security management system. Of course, there will also be questions about security management system requirements. There will be questions about fundamental audit concepts and principles. Fourthly, there will be questions about preparing an ISO 27001 audit, as well as conducting an ISO 27001 audit and closing an ISO-2111. 27,000 audits. And lastly, you will get some questions about managing an ISO 27,000 audit program. So the purpose of the certification exam is really to evaluate whether candidates have to grasp the audit concept and techniques so that they are able to plan, manage, conduct an audit program and as well lead a team of auditors. The PECB Examination Committee ensures that the exams questions are adequate and based on professional practices. So all of the competency domains as I stated will be covered during the exam. If you wish to get more information on how the exam is set up, how the examination works, you can also find a little bit more information On the PECB website. Passing the exam is not enough to earn your certification. It is, of course, the first step, but you need to meet all the prerequisites for certification. So, to get a PECB ISO 27000 lead auditor certified, you need to have a couple of things that you need to do. These prerequisites will be discussed later in the course as well, but I'll walk you briefly through Through them. So, first of all, you need to pass the exam. Secondly, you also need to adhere to the PECB Code of Ethics. You need to have at least five years of professional experience of which two of them are related to information security management. You need to be able to present at least three three hundred hours of related activity, so related to information information security management and auditing. You need to provide two professional references that will be checked by PECB. And if you have done all of those of If you checked all the boxes of those prerequisites, you will become a PECB ISO certified ISO 27001 lead auditor. And obviously, after you received your certificate, you will need to maintain your certificate. certification. More information about that will also be given later on in the course. The PECB certificate will look like the one that you have in front of you on the slide So we'll you will receive that um through via your PECB dashboard. So you will be able to find it there. You will be able to download in a PDF format, and you will also be able through the PEC PCB dashboard to gain your credly digital badge because PCB partnered with Credly, so it will allow you to also download that digital badge which you can use on your resume or on your digital media media like LinkedIn to also show to your network that you have achieved a new certification. Lastly I want to talk a little bit about PECB PECB is Professional Evaluation and Certification Board, is a certification body that provides education, certification, and certification. certificate programs for individuals on a wide range of discipline. Besides the training programs, PCB also offers PCB skills, which is a new format where you can find snackable content in a wide range of expertise. And you have also the piece store where you can find a lot of um useful um uh standards as well where you can buy the standards but also white papers articles toolkits and so on The mission of PECB is really to provide their clients with comprehensive examination and certification services that inspire trust and benefit the society as a whole. Their vision is to become the global benchmark for the provision of professional certification services, and their values are integrity, professionalism, and fairness. PCB helps professionals show commitment and competence by providing them with valuable education, evaluation, and certification against internationally recognized standards. Their principal objectives and activities are establishing the minimum requirements necessary to certify professionals. Reviewing and verifying the qualification of applicants for eligibility to be considered for the certification evaluation. Developing and maintaining reliable, valid and current certification evaluations, granting certificates to qualified candidates, maintaining records and publishing a directory of the holders of valid certificates. Establishing requirements for the periodic renewal of certification and determining compliance with those requirements. Ascertaining that our clients meet ethical standards in their professional practice and lastly representing its members where appropriate in matters of common interest.