55-703841 Standard Based Security Audit and Assessment Brief | SHU

Sub-

task

Marking

Criteria

Total

weight

• Describe and evaluate a stage 1 audit. What is its purpose? Describe and evaluate all relevant areas, activities, and outputs.
• Create a list and provide the importance of all mandatory documents from ISO/IEC 27001.
• Create a stage 2 audit plan for the case study organisation and explain why you need it – a table format is most suited.
• Describe and evaluate a stage 2 audit. What is its purpose? Describe and evaluate all relevant areas, activities, and outputs.
• Explain what is meant by objective evidence and why it is important. Give 5 examples from the case study.
• Focus on, as a minimum, the required competencies, checklists, the opening and closing meetings.
• Reference the ISO 27001, ISO 19011, and ISO 17021 wherever applicable in this booklet.
•  Flow diagrams are advisable for any process demonstration.

Note: This should be in form of a guidebook that anyone can follow without prior knowledge in auditing or ISMS. The secret lies in the simplicity and comprehensiveness of this document.

4

• Assessment must be uploaded to the official submission point & Turnitin point only in Word format (.docx).
• Font must be in Calibri Body and size 11, with 1 line spacing.
• The document must be named as StudentID_StudentName_SBSAAA_SBSAAA_SBSAAA_ SBSAAA 2025 (Student ID replaced by your student ID, and StudentName replaced by your First Name).
• The referencing/bibliography must be in line with SHU guidance, and the work submitted is your own and not plagiarised. Turnitin score must be within the acceptable range.
•  Proofread your work to check your spelling and grammar.
• Keep to the word count.
•  Continual contribution to class activities and group discussions.