Integrated Management Systems
ISO 27001:2022 & ISO 22301:2019 Lead Auditor Training
Overview
A professional programme for those who plan, lead and report management-system audits against ISO 27001:2022 and ISO 22301:2019 as an integrated audit. It follows the audit principles of ISO 19011 and covers the full audit cycle — from planning and opening meeting to findings, nonconformity grading, reporting and follow-up — through realistic case work and role play.
Standards in this programme · 2
Explore each standard covered
ISO/IEC 27001:2022
Information Security Management System
Lays out requirements for establishing, operating and improving an information security management system that protects the confidentiality, integrity and availability of information. Organizations must assess information security risks and select appropriate controls to treat them. It applies to organizations of any size or sector that need a structured, auditable way to manage cyber and information risk.
Key objectives
- Protect the confidentiality, integrity and availability of organizational information
- Establish a systematic, risk-based process for identifying and treating security threats
- Build organizational resilience against cyber-attacks and data breaches
- Provide a certifiable framework that demonstrates security commitment to stakeholders
- Enable continual improvement of security controls as threats evolve
Who uses it
Organizations that handle sensitive information and need to manage information security risk.
Structure of the standard
1–3Scope, references & terms
Introductory clauses defining the scope of the standard, normative references and key definitions.
4Context of the organisation
Understand internal and external issues, the needs and expectations of interested parties, and the scope of the management system.
5Leadership
Top-management commitment, an appropriate policy, and clearly assigned roles, responsibilities and authorities.
6Planning
Address risks and opportunities, set measurable objectives and plan the actions and changes to achieve them.
7Support
Provide the resources, competence, awareness, communication and documented information the system needs.
8Operation
Plan and control the processes needed to meet information-security requirements and to implement the actions determined by information-security risk assessment and treatment.
9Performance evaluation
Monitor, measure, analyse and evaluate; conduct internal audits and management reviews.
10Improvement
Manage nonconformities and corrective action and continually improve the management system.
Standard overview video
Learning outcomes
What you will be able to do
- Interpret the requirements of ISO 27001:2022 and ISO 22301:2019 in an audit context
- Plan an audit programme and an individual audit, including scope, criteria and sampling
- Lead an audit team and conduct opening and closing meetings
- Collect and evaluate objective evidence through interview, observation and document review
- Grade nonconformities and write clear, defensible audit findings
- Prepare the audit report and follow up corrective actions
Who should attend
Auditors, consultants, management representatives and professionals who want to lead first-, second- or third-party audits.
More in Integrated Management Systems
All Integrated Management SystemsLead AuditorIMS-532Integrated Management Systems
ISO 14001:2026 & ISO 21001:2025 & ISO 45001:2018 & ISO 9001:2015 Lead Auditor Training
Lead AuditorIMS-TRD-34213Integrated Management Systems
FSSC 22000 Version 7 & ISO 22000:2018 Lead Auditor Training
Lead AuditorIMS-TRD-532Integrated Management Systems
ISO 9001:2015 & ISO 22000:2018 & ISO 14001:2026 Lead Auditor Training
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.