ISMS Lead Auditor Course – Participant Handout

Exercise 7: Auditing Operation (Clause 8)

Purpose:
To determine requirements for Operation

Duration:
45 minutes to complete the exercise
15 minutes classroom feedback discussion

Reference:
ISO / IEC 27001:2022
Case Study

Directions:

Clause 8.1, 8.2, 8.3

In your teams
 Topic 1
How would you evaluate the operational planning and control process?

 Topic 2
How would you verify the organization has effective risk assessment process?

 Topic 3
How would you verify the organization has effective risk treatment process?
.

Issue: November 2022 ISMS Auditor/Lead Auditor Training Course 1 of 1