1. Home
  2. GAQM
  3. ISO27-13-001 Exam Syllabus

GAQM ISO27-13-001 Exam Syllabus

Start Free ISO27-13-001 Exam Practice After Reviewing the Topics

Before starting your ISO27-13-001 exam preparation, it is recommended to review the complete GAQM ISO 27001 : 2013 - Certified Lead Auditor exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free ISO27-13-001 questions. We also provide premium ISO27-13-001 practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

GAQM ISO27-13-001 Exam Objectives

Section Objectives
Module 1 - Information Security
  •     The Importance of Being Informed
  •     Globally Connected
  •     More Ado About Risks
  •     Decoding the Secret of Information Security Management
  •     Management and Awareness
  •     Legislation, Regulation and Governance
Module 2 - Information Security 27001 Standards
  •     ISO/IEC Standardisation
  •     Overview
  •     Evolution of the ISO/IEC 27000
  •     The Weakest Link
  •     Overview of ISO/IEC 27001: 2013
  •     ISMS Audience
  •     Processes
  •     ISMS Stages
Module 3 - ISMS Business Context
  •     Organisational Context
  •     Needs and Expectations
  •     ISMS Scope
  •     Interested Parties
  •     Requirements Relevant to the ISMS
  •     Gathering Requirements Relevant to the ISMS
Module 4 - ISMS Scope
  •     ISMS Scope
  •     What to Consider and What to Include
  •     Object of ISMS Scope
  •     Defining the ISMS Scope
  •     Scope Example
  •     External and Internal Connections

 
Module 5 - ISMS Risks
  •     The Importance of Risk and Opportunity
  •     Risk Management Process
  •     Ongoing Reassessment of Risk
Module 6 - ISMS Leadership and Support
  •     Management Policy
  •     Leadership
  •     Roles and Responsibilities
  •     Resources
  •     Awareness
Module 7 - Controls to Modify the Risks
  •     Determining the Controls
  •     System of Controls
  •     Policies and Procedures
  •     Sector-Specific Controls
Module 8 - ISMS Operations
  •     Operational ISMS Procedures
  •     Ongoing Risks Management
  •     Operational Threats
  •     Operational Processes
  •     Incident Management
  •     ISMS Availability and Business Continuity

 
Module 9 - Performance Evaluation
  •     Performance, Change and Improvement
  •     Monitoring and Operational Reviews
  •     ISMS Measurements Programme
  •     Ongoing Risk Management
  •     ISMS Audits
  •     Management Reviews of the ISMS
  •     Awareness and Communications
Module 10 - Improvements to the ISMS
  •     Continual Improvement
  •     Conformance and Nonconformance
  •     Making Improvements
Module 11 - Auditing
  •     Audit Process
  •     Nonconformities
  •     Audit Report
  •     Surveillance Audits
  •     Recertification
  •     Audit Trails
  •     Competence
Official Information https://gaqm.org/certifications/iso_certifications/iso-27001-2013-certified-lead-auditor