Talk:ISO/IEC 27001 Lead Auditor

About the different auditor types listed (Provisional ISMS auditor, ISMS auditor, etc.), I don't believe these are mandatory requirements. Organisations such as BSI do not state that any requirement is mandatory for their "ISO 27001 Lead Auditor training course", which is allegedly the more senior course. In their "who should attend?" page relevant to this course, BSI list

   * Those wishing to learn about effective audit practices
   * Existing information security auditors who wish to expand their auditing skills
   * Consultants who wish to provide advice on ISO 27001 systems certification
   * Security and Quality professionals

So I believe that in the article it should be highlighted that the requirements mentioned are not mandatory.

See reference at http://www.bsigroup.co.uk/en/Learning/Course-by-subject/Information-Security/Lead-Auditor-ISO-27001/

Faweekee (talk) 19:45, 2 January 2009 (UTC)[reply]