call now button2



Designed to provide delegates with a full knowledge of changes to ISO management system standards arising as a result of the adoption of Annex SL. You will also gain full knowledge of changes arising as a result of revised Information Security Management Systems requirements necessary to satisfy IRCA retraining requirements.


To give and understanding of:

  • Purpose and use by standards writers of Annex SL
  • New and revised terms and definitions
  • Requirements for understanding the organisation and its context
  • New and enhanced requirements for leadership
  • Requirements for planning the management system
  • Requirements for documented information
  • Significant differences to previous management system requirements as appropriate
  • Changes in ISMS specific requirements arising as a result of transitioning from ISO/IEC 27001:2005 to ISO/IEC 27001:2013
  • Interpret the Information security requirements of ISO/IEC 27001:2013
  • Demonstrate an understanding of those requirements in respect of the risk assessment process, the risk treatment process, the Statement of applicability and the risk treatment plan
  • Demonstrate the ability to conduct an audit of the requirements and evaluate audit evidence to identify conformity with the requirements