Information security & privacy > ISO/IEC 27001. Information security

ISO/IEC 27001:2013. Information security management system auditor

The framework for information security management proposed by the ISO/IEC 27000 series of international standards is one of the most popular in the world. It can be applied by any organization looking to protect its assets including financial information, intellectual property or personal data.

An ISO/IEC 27001 auditor certification is evidence of your knowledge of the requirements in the standard (ISO/IEC 27001) and of the information security controls detailed in ISO/IEC 27002.

Give it a try for free. Take a 3-question quiz to see how you score.

Question 1 / 3

The potential cause of an unwanted incident, which can result in harm to a system or to an organization is…

a threat

a risk

a vulnerability

Question 2 / 3

You are auditing a financial institution for its ISMS and you are informed that the screening procedures for all candidates for employment include the same background verification checks. Is this approach in line with the requirements of ISO/IEC 27001?

Yes, this is acceptable, as long as the screening is applied in all cases (for all candidates for employment), without exception

No, the background verification checks should be proportional to the perceived risks and the classification of the information to be accessed

Yes, this is ok, the standard requires a screening process, the details of which are decided by the organization

Question 3 / 3

During an ISMS audit you observe a situation that may represent a non-compliance with the relevant privacy and personal data protection legislation. What to do in such a situation?

The ISMS audit is not a legal compliance audit; you have no responsibility to report such situations

You inform the top management of the organization about the situation

Your duty is to inform the management of the organization and the relevant authorities about the issue

How did you find it?

Ready to level up your skills?

Go for the certification!

Enroll now

ISO/IEC 27001:2013. Information security management system auditor image

145 USD

Purchase now

This certification includes:

Pre-recorded video materials
PDF handbooks
Lifetime access and no deadline to take the exam
Certificate after passing
Free first retake

About this certification

Our ISMS auditor certification is evidence of your good understanding of the requirements in ISO/IEC 27001 and how they can be audited. You can use your certification to advance you career in information security management.

As a certified auditor you prove that you have knowledge of the information security controls that an organization can apply. With this certification you can demonstrate that you are aware of the principles and the techniques for auditing a management system described in ISO 19011:2018.

The ISMS auditor certification is valid for 2 years, provided that you affirm your commitment to abide by the Code of ethics for RIGCERT Certified professionals.

Why choose this certification?

You should go for the ISO/IEC 27001:2013 ISMS Auditor certification if you:

want to distinguish yourself from other information security management system auditors/ consultants;
are looking to demonstrate your knowledge of ISO/IEC 27001:2013 and ISO 19011:2018;
want to advance your information security management career;
plan to join an auditing/ certification organization;
want to help companies improve their information security systems, with value-adding audits.

About the exam

The ISO/IEC 27001. Information security management system auditor test consists of 32 questions that you should answer in maximum 55 minutes. The minimum percentage of correct answers is 65%.

The questions in the test relate to the requirements for an information security management system according to ISO/IEC 27001:2013, including the information security controls detailed in ISO/IEC 27002:2013, plus the guidelines for auditing a management system detailed in ISO 19011:2018.

You get the results of the exam on the email in 1-2 working days.
You can prepare for this exam using our pre-recorded online courses and PDF handbooks.

This package includes:

ISO/IEC 27001:2013. Information security management system auditor

About this certification

Why choose this certification?

Key benefits

Training materials

Transparent process

Online testing

About the exam

About RIGCERT

Looking to certify 5 or more people?