Audit and Compliance Management
Audit and compliance fundamentals, reading and interpreting requirements, and a full security standard audit from planning to closure, practised against ISO 27001, PCI DSS, ISO 20000-1 and ISO 22301.
7
rooms
2220
total experience points (XP)
8 hours
estimated time
What you will learn to do
- ›Plan and run an audit against a security standard from scope to closure
- ›Read a requirement clause and turn it into a testable control with named evidence
- ›Build and run a compliance programme with owners, monitoring and breach handling
- ›Audit against ISO 27001, PCI DSS, ISO 20000-1 and ISO 22301 and grade the findings
Rooms (lessons)
Audit Fundamentals
Plan independent, evidence-based audits and report findings and conclusions within a defensible scope.
Compliance Fundamentals
Turn obligations into owned controls, risk-based monitoring, and defensible breach reporting decisions.
Interpreting Compliance Requirements
Translate obligations into scoped, agreed, testable controls with named evidence and defensible interpretations.
Performing a Security Standard Audit, End to End
Plan, perform, report and close an evidence-led internal security audit at Cedar Relay Cloud.
Standards in Practice: ISO 27001 and PCI DSS
Trace information security management system (ISMS) certification evidence and define payment security scope without confusing assessment routes or exceptions.
Standards in Practice: ISO 20000-1 and ISO 22301
Connect service commitments, business recovery priorities and integrated audit evidence across two management systems.
Capstone: Run an Integrated Audit
Plan, test, report and follow up a combined payments and hosting audit across four assurance frameworks.