Rebuilding Kaldera Engineering's ISO 27001 internal audit programme across 22 sites in 9 countries after the certification body raised major nonconformity MAJ-01: the old programme ran 14 audits and 41 findings, every one an observation, that confirmed documents existed but never tested that controls operated; a Houston leaver test that now samples 61 leavers against 610 accounts, finds seven contractors still active and checks the same cause across every site; and the eight-step audit programme staircase from a clause 9.2 charter through scoping, competence, method, evidence, findings and the certification-body pack to programme metrics, ending with MAJ-01 closed at the February surveillance visit.

CY-EXPERT-031Expert Level · ISMS - ISO/IEC 27001

ISMS Internal Audit Assurance — The Audit Programme Staircase

An expert-level course that designs and proves an ISO/IEC 27001 internal audit programme a certification body will accept. Climb the Audit Programme Staircase - eight steps from Programme Design Against Clause 9.2 through Risk-Based Scoping, Auditor Competence, Method, Evidence, Nonconformity Classification and Management Review to Programme Effectiveness - as Henrik rebuilds Kaldera Engineering's 22-site programme after a major nonconformity for testing that documents exist rather than that controls operate, and assemble every component into a certification-body-ready Internal Audit Programme File.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Design and scope a multi-site ISMS internal audit programme that satisfies clause 9.2, ISO 19011 and IAF MD 1 with full coverage of every site, clause and applicable control across the certification cycle.
Staff and execute audits with competent, independent auditors using test procedures, defensible samples and working papers that prove controls operated over the period and that a certification body can re-perform.
Classify findings by a written rule, drive root cause and corrective action under clause 10.2, and close nonconformities only on verified evidence with extent and repeat analysis across sites.
Present audit results to management review, manage the certification-body interface including disputed findings and scope changes, and measure and improve the programme with metrics and integrated assurance.

Price:৳12,000