ISO-27001 Audit Checklist & Audit Report with APA referencing

Part A: Audit Checklist (30% – about 600 words) The checklist helps you in preparing and carrying out the actual audit. You are expected to briefly address all these 6 steps. Note that these are generic and need to be tailored to the case study. Further details of what you are expected to do in this part include:  Step 1: Document review – What documentation will you be reviewing for the audit and why? What will you be looking out for?  Step 2: Creating the checklist – What list of items/requirements, identified from document review step, will you be checking during the audit?  Step 3: Planning the main audit – Where will you start? The checklist from step 2 will guide you.  Step 4: Performing the main audit – Give a high-level overview of your audit findings. Note that the detailed information/findings will be in the main audit report (Part B)  Step 5: Reporting – Since the audit report is in Part B, explain the structure of the report here.  Step 6: Follow-up – If you were to recheck the ISMS next year, what would your follow-up actions be? Part B: Audit Report (70% – about 1400 words) Your audit report should consider the ISMS document and be clear on the following, with justifications, where necessary:  Non-conformities in the ISMS document: This should include at least 2 major non- conformities and 3 minor non-conformities  Observations in the ISMS document: This should include at least 3 observations  Interview: The audit is expected to provide evidence of conformity and one of the main techniques for finding evidence is interview. If you were to conduct this audit in real life, who (in the PC) would you be interviewing and what questions would you be asking? Provide reasons/justifications for both the choice of interviewee and questions.  Recommendations: What are your final recommendations in terms of whether the ISMS meets the relevant ISO27001 requirements and what needs to be done moving forward? Keep it brief. Focus on what really matters, the main issues and go straight to the point.