ISO 31000 Training | ISO 31000 Lead Auditor Training in Lusaka

ISO 31000 Lead Auditor Training Course Outline

Module 1: Introduction to ISO 31000

• Introduction
• Scope
• Normative References
• Terms and Definitions
• Principles

Module 2: Risk Management

• Introduction
• Process
• Response to Risks
• Importance of Risk Management

Module 3: Framework

• General
• Leadership and Commitment
• Integration
• Design
• Implementation
• Evaluation
• Improvement

Module 4: Process

• General
• Communication and Consultation
• Scope, Context, and Criteria
• Risk Assessment
• Risk Treatment
• Monitoring and Review
• Recording and Reporting

Module 5: Risk Treatment

• Risk Response Planning
• Identification of Options
• Development of Action Plan
• Approval of Action Plan
• Implementation of Action Plan
• Identification of Residual Risks

Module 6: Methods for Risk Management

• Avoidance
• Retention
• Sharing
• Transferring
• Loss Prevention and Reduction

Module 7: Audit Risk

• What is Audit Risk?
• Types of Audit Risk

Module 8: Internal Audit and Principles of Auditing

• What is an Internal Audit?
• What Do Internal Audits Accomplish?
• Risk Management and Compliance
• Duties of an Internal Auditor

• Introduction to Auditing
• Principles of Auditing

Module 9: Managing an Audit Programme

• General
• Establishing Audit Programme Objectives
• Determining and Evaluating Audit Programme Risks and Opportunities
• Establishing the Audit Programme
• Implementing Audit Programme
• Monitoring Audit Programme
• Reviewing and Improving Audit Programme

Module 10: Conducting an Audit

• General
• Initiating Audit
• Preparing Audit Activities
• Conducting Audit Activities
• Preparing and Distributing Audit Report
• Completing Audit
• Conducting Audit Follow-Up

Module 11: Conducting the Risk Assessment

• Risk Assessment Scope
• Risk Assessment Process
  • Collect Information
  • Identify Systems or Processes at Risk
  • Evaluate the Likelihood of Harm Occurring
  • Evaluate the Impact
  • Determine Risk for the Item
  • Investigate Options for Eliminating or Controlling Risks
  • Prioritise Action and Decide on Control Measures
  • Implement Controls
  • Measure the Effectiveness of Implemented Actions
• Assessing Risks at Organisational Level
• Assessing Risks at the Business Process Level
• Assessing Risks at the Information System Tier
• Communicating Risk Information

Module 12: Risk Mitigation Planning, Implementation, and Progress Monitoring

• Introduction
• MITRE SE Roles and Expectations
• Risk Mitigation Strategies

Module 13: Implementing Risk Management Plan

• Overview
• Process of Implementing Risk Management Plan
• Conclusion of Implementing Risk Management Plan

Module 14: Monitoring and Reviewing Risk

• Monitoring and Reviewing Risk Management Framework
• Reporting and Recording

Module 15: Continual Improvement of the Framework for Risk Management

• Overview
• PDCA Implementation
• Indicators of the Need for Continual Improvement
• Linking Continuous Improvement and Risk Management
• Steps of Continuous Improvement of an Organisation’s Risk Culture

Module 16: Competence and Evaluation of Auditors

• General
• Determining Auditor Competence
• Establishing Auditor Evaluation Criteria 
• Selecting Appropriate Auditor Evaluation Method
• Conducting Auditor Evaluation
• Maintaining and Improving Auditor Competence