Information Security, Privacy & IT
ISO/IEC 38500:2015 IT Governance – Lead Auditor
Overview
A professional programme for those who plan, lead and report management-system audits against ISO/IEC 38500:2015. It follows the audit principles of ISO 19011 and covers the full audit cycle — from planning and opening meeting to findings, nonconformity grading, reporting and follow-up — through realistic case work and role play.
The standard
About the standard
ISO/IEC 38500:2015
ISO/IEC 38500:2015 is covered in this programme as part of the course material. The trainer introduces its purpose, structure and key requirements, and how it fits with the other standards in the course.
Learning outcomes
What you will be able to do
- Interpret the requirements of ISO/IEC 38500:2015 in an audit context
- Plan an audit programme and an individual audit, including scope, criteria and sampling
- Lead an audit team and conduct opening and closing meetings
- Collect and evaluate objective evidence through interview, observation and document review
- Grade nonconformities and write clear, defensible audit findings
- Prepare the audit report and follow up corrective actions
Who should attend
Auditors, consultants, management representatives and professionals who want to lead first-, second- or third-party audits.
More in Information Security, Privacy & IT
All Information Security, Privacy & IT
Internal AuditorISMS-01Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Internal Auditor
Lead AuditorISMS-02Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Auditor
Lead ImplementerISMS-03Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Implementer
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.