ISO 28000 Lead Auditor Training

This module introduces the foundational concepts of Security Management Systems (SeMS) and the core requirements of ISO 28000. You will gain an understanding of the standard's structure, its relevance to supply chain security, and the overall certification process.

• Training course objectives and structure overview.
• Standards and regulatory frameworks for supply chain security.
• PECB certification process and credential pathways.
• Fundamental concepts and principles of security management.
• Overview of ISO 28000 requirements and clauses.
• Understanding the SeMS scope and boundaries.
• Exercise: Mapping ISO 28000 clauses to organizational security objectives.

Delve into the fundamental principles of auditing, focusing on the preparation and initiation phases of an ISO 28000 audit. This module covers evidence-based and risk-based auditing, and how technology impacts modern audit practices.

• Fundamental audit concepts and principles from ISO 19011.
• The impact of trends and technology in SeMS auditing, including automated tools.
• Evidence-based auditing techniques for security controls.
• Risk-based auditing approaches for supply chain vulnerabilities.
• Initiation of the audit process: objectives, scope, and criteria.
• Conducting a Stage 1 audit: documented information review and readiness assessment.
• Exercise: Developing a risk-based audit plan for a simulated supply chain.

This module focuses on the practical execution of on-site audit activities, including preparing for Stage 2, effective communication strategies, and developing audit test plans to gather objective evidence.

• Preparing for the Stage 2 audit: audit team roles and responsibilities.
• Executing the Stage 2 audit: conducting interviews, observations, and sampling.
• Communication during the audit: managing auditee interactions and challenges.
• Audit procedures for evidence collection and verification.
• Utilizing digital tools for efficient evidence management and reporting.
• Creating detailed audit test plans for ISO 28000 controls.
• Exercise: Simulating an on-site audit interview and evidence collection.

Learn to effectively close an ISO 28000 audit, including drafting nonconformity reports, preparing the final audit report, and evaluating corrective action plans. This module also covers managing an ongoing internal audit program.

• Drafting clear and concise audit findings and nonconformity reports.
• Audit documentation and quality review processes.
• Closing of the audit: presenting findings and recommendations.
• Evaluation of corrective action plans by the auditor.
• Beyond the initial audit: surveillance audits and re-certification.
• Managing an internal ISO 28000 audit program effectively.
• Exercise: Drafting a nonconformity report and proposing corrective actions.

This final module is dedicated to preparing you for the PECB ISO 28000 Lead Auditor certification exam. It covers key competency domains and provides strategies to maximize your success.

• Review of fundamental principles and concepts of SeMS.
• Deep dive into ISO 28000 requirements for auditing.
• Understanding fundamental audit concepts and principles for the exam.
• Strategies for preparing an ISO 28000 audit for exam scenarios.
• Techniques for effectively conducting an ISO 28000 audit in exam questions.
• Mastering the closing of an ISO 28000 audit for certification.
• Exercise: PECB ISO 28000 Lead Auditor mock exam and debrief.