Proposed pathway · Enrolment by enquiry
Practical Security Auditor
Evidence, control effectiveness, independence and assurance decisions · 80–100h proposed; fictional organization audit and defended findings.
What you will be able to demonstrate
- Plan an audit against scoped criteria and sample selection
- Trace governance approval into actual technical and operational controls
- Corroborate logs, configurations, interviews and restoration records
- Separate implemented, effective, ineffective and unverified controls
- Defend evidence-backed nonconformities and verify corrective actions
Evidence from the practical assessment
- Audit plan with criteria and independence declaration
- Sample and chain-of-custody register
- Control-effectiveness matrix with findings
- Management report and corrective-action plan
- Working papers, oral defense and follow-up verification
How practical competence is assessed
Capstone: the simulated organization has polished documentation but inconsistent access reviews, logs and backup evidence. The candidate must reject unsupported conclusions and preserve independence.
How this connects to customer work
Client mandate and independence → audit design → evidence and sampling → findings validation → corrective action verification.
Download sample working documents
Training and assessment are separate from independent certification. Published course durations and assessment designs are programme proposals subject to final scheduling and scheme approval.