ISO/IEC 27001:2022 Lead Auditor – CSQA Qualification

I am pleased to share a significant milestone in my professional journey: I have obtained the ISO/IEC 27001:2022 Lead Auditor qualification, issued by CSQA, a nationally and internationally accredited certification body.

The qualification formally attests to my competence in planning, conducting, evaluating and reporting audits of information security management systems (ISMS), in accordance with ISO/IEC 27001:2022 and the ISO 19011 auditing guidelines.

During the certification process I deepened my knowledge and practical skills in:

• the core principles of information security management;
• process-based auditing techniques and the PDCA (Plan-Do-Check-Act) cycle;
• critical analysis of documentation and audit evidence, with constant reference to clauses 4 to 10 of the standard and the updated Annex A (2022 edition);
• identification and classification of nonconformities, observations and opportunities for improvement based on objective criteria;
• drafting structured audit reports and managing formal communications with auditees and stakeholders.

This qualification builds on my long professional experience in ICT, networking and cybersecurity, with a strong focus on regulatory compliance, risk analysis and the protection of sensitive data and critical infrastructure.

Becoming an ISO/IEC 27001 Lead Auditor is not only a recognition of my technical and methodological expertise but also a commitment to supporting organisations on their way to certification, effective risk governance and measurable security practices.