ISO 27001 Lead Auditor information security management 

Building upon the foundation understanding of the ISO 27005 risk management framework validated by the Certified Internal Controls Risk Analyst credential, the ISO 27001 Certified Internal Controls Architect (CICA) certification certifies your ability to develop the formal structure, governance, and policy of an ISO 27001 conforming Information Security Management System (ISMS).

Furthermore, the CICA certification ensures that you are qualified to develop strategic objectives according to core ISO 27001, 27002, 27003, and 27005 best practices.

Building upon the foundation understanding of the ISO 27005 risk management framework validated by the Certified Internal Controls Risk Analyst credential, the ISO 27001 Certified Internal Controls Architect (CICA) certification certifies your ability to develop the formal structure, governance, and policy of an ISO 27001 conforming Information Security Management System (ISMS).

Furthermore, the CICA certification ensures that you are qualified to develop strategic objectives according to core ISO 27001, 27002, 27003, and 27005 best practices.

Upon completion of this training and certificate program, you will:

• be equipped with knowledge and skills required to develop, manage, monitor, and improve an Information Security Management System in line with the current ISO 27001 and 27002 standards of best practice;
• expand your information security competency;
• increase your credibility through gaining international recognition; and
• improve your résumé and help to increase your earning potential.

Getting certified is easy, and can be accomplished completely online. The ISO 27001 CICA™ certification is available to qualified candidates who:

1. Are a member of CIS in good standing. 
   If you are not already an Associate member of the CIS certification student body, you must first become a member to pursue the CICA credential.
   
   
2. Attend the required course, live or online. Prerequisite training for ISO 27001 CICA certification eligibility includes:
   • Policy Workshop: ISO 31000 Enterprise Risk Management
   • Policy workshop: ISO 27001 Information Security Management
     
     
3. Pass the CICA Exams. For CICA certification, candidates must pass exams #RM101, #ISMS101 and #ISMS102. Exams are administered online and can be taken at your convenience at your home or work through the CIS eLearning Center, where your progress and score are monitored and recorded centrally. Your exam results are provided automatically upon completion of your exam.
   
   
4. Complete and submit your ISO 27001 CICA certification application to the Certification Department at certification@certifiedinfosec.com. Certification applications are available for download at www.certifiedinfosec.com/services/certification-programs/cis-professional-certification-program/certification-kit-brochures-and-applications.

 

---

 

Your digital credentials

You will officially become certified (certificated) once your exam results and required documentation are validated and approved by the certification committee.

Your digital credential certificates and badges will be processed and emailed to you within 10 business days following the receipt of the required documentation. Learn more about CIS' digital certificates and badges.

Certification maintenance and renewal requirements can be viewed at www.certifiedinfosec.com/services/certification-programs.

 

---

 

Upgrade Path: Certified ISO 27001 Lead Auditor™

Certified Information Security is authorized to provide all required training and exams for ISO 27001 CICA certification. ISO 27001 CICA certification candidates must successfully complete:

• Policy Workshop: ISO 31000 Enterprise Risk Management
   
• Policy Workshop: ISO 27001 Information Security Management

ISO 27001 CICA certification requires successful completion of three exams:

• RM101
  
  
• ISMS101
  
  
• ISMS102

---

Required Exam: RM101

Exam #RM101 maps to ISO/IEC 31000, 31010, and 27005 risk management content areas taught in "Policy Workshop: ISO 31000 Enterprise Risk Management."

• Required  for CICRA, CICA, CBCS, CBCA, and CBCM certifications.
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes

RM101 Content Areas

1. Context establishment
2. Risk assessment
3. Risk treatment
4. Risk acceptance
5. Risk communication
6. Risk monitoring and review

---

Required Exam: ISMS101

Exam #ISMS101 maps to ISO/IEC 27001, 27002, and 27003 content areas associated with ISMS planning and strategy, as taught in "Policy Workshop:ISO 27001 Information Security Management."

• Required for ISO 27001 CICA and ISO 27001 Lead Auditor certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

Content Areas

1. Developing an ISMS program
2. Project managing a successful ISO 27001 internal controls implementation
3. Establishing the ISMS organization
4. Core ISO 27001 and 27002 best practices relating to:
   • InfoSec policy and scope
   • Risk assessment and Statement of Applicability
   • Understanding the organization

---

Required Exam: ISMS102

Exam #ISMS102 maps to ISO/IEC 27001 and 27002 content areas associated with ISMS deployment, monitoring, exercising, and maintenance, as covered in "CIS Policy Workshop: ISO 27001 Information Security Management."

• Required  for CICA and ISO 27001 Lead Auditor certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes

Content Areas

Core ISO 27001 and 27002 best practices relating to:

• External party controls
• Asset management
• Human Resources security
• Physical and environmental security
• Equipment security
• Communications and operations management
• Malicious software controls
• Network security management and media handling
• Business continuity management
• Compliance
• Exchange of information
• Electronic commerce, e-mail and internet security
• General, network, operating system, and application access control
• Systems acquisition, development and maintenance
• Cryptographic controls
• Development and support process security
• Monitoring of information security and incident management
• Preparing for an ISO 27001 audit

Qualified experience for Certified ISO 27001 CICA™ certification

Certified ISO 27001 CICA is a mid-level certification for cyber security professionals with at least two years of qualified experience. This certification maps to and fulfills all ISO/IEC 27001 competence requirements. General characterization for eligible experience:

• Developing an ISMS program
• Project managing a successful ISO 27001 internal controls implementation
• Core ISO 27001 and 27002 best practices relating to:
  • InfoSec policy and scope
  • Risk assessment and Statement of Applicability
  • External party controls
  • Asset management
  • Human Resources security
  • Physical and environmental security
  • Equipment security
  • Communications and operations management
  • Malicious software controls
  • Network security management and media handling
  • Monitoring of InfoSec and incident management
  • Business continuity management
  • Compliance Exchange of information
  • Electronic commerce, e-mail and internet security
  • General, network, operating system, and application access control
  • Systems acquisition, development and maintenance
  • Cryptographic controls
  • Development and support process security
  • Monitoring of cyber security and incident management
  • Business continuity management
  • Compliance
  • Operations audit

Preparing for Certified Information Security's professional certification exams #RM101 and #ISMS10 is serious business. This is where I can help you. If you first successfully complete: All prerequisite ISO 27001 Lead Implementer certification training; and All RM101, ISMS101, and ISMS102 online practice exams Certified Information Security guarantees your success in passing certification exams #RM101, #ISMS101, and #ISMS102. If you do not pass exams #RM101, #ISMS101, and #ISMS #102 on your first attempt after completion of your required course and practice exams, Certified Information Security will allow you to re-test at no additional charge until you successfully pass your certification exams.