ISO/IEC 19770-1:2017 LEAD AUDITOR

To become a Lead Auditor for ISO/IEC 19770-1:2017, which relates to IT asset management (ITAM) and specifically focuses on software asset management (SAM), you typically need to undergo specific training and pass an exam. Here's an outline of what you would generally need to know and do in preparation for the exam and the certification:

1. Understand the Standard:

ISO/IEC 19770-1:2017 defines a standard for software asset management processes and practices, including frameworks for managing software assets throughout their lifecycle. As a lead auditor, you'll need to be well-versed in:

• The scope and objectives of the ISO/IEC 19770-1:2017 standard.

• The terminology used in the standard, such as “asset management,” “license management,” and “compliance.”

• The structure and key clauses of the standard.

2. Lead Auditor Training:

To become a certified Lead Auditor for this standard, you typically need to attend an accredited training course, which often involves:

• An overview of ISO 19011 (Guidelines for Auditing Management Systems).

• Detailed study of the requirements of ISO/IEC 19770-1:2017.

• Best practices for auditing a software asset management system.

• Audit planning, conducting audits, reporting findings, and following up on corrective actions.

• Practical exercises, including audit role-play scenarios.

3. Exam Content:

The exam to become a Lead Auditor for ISO/IEC 19770-1:2017 typically covers the following areas:

• ISO/IEC 19770-1:2017 Standard: Understanding the clauses, principles, and criteria outlined in the standard.

• Audit Principles: Principles of auditing management systems as per ISO 19011.

• Audit Process: Knowledge of the audit process from planning to reporting.

• Audit Techniques: Practical application of auditing techniques in a SAM environment.

• Legal & Compliance Issues: Understanding the regulatory context for software asset management, including issues related to software licensing, vendor contracts, and compliance with industry standards.

• Risk Management: How to evaluate risks and identify non-compliance issues within the SAM framework.

4. Exam Format:

The format of the exam may vary depending on the certification body, but it generally consists of:

• Multiple-choice questions covering the ISO/IEC 19770-1:2017 clauses and audit principles.

• Practical case study scenarios or role-playing exercises where you need to demonstrate audit planning, execution, and reporting skills.

5. Certifying Bodies:

Global Assessment Services Limited (GASL) 

Link : https://gasl.uk/

6. Prerequisites for the Exam:

Most certifying organizations require candidates to meet certain prerequisites before sitting for the Lead Auditor exam:

• Work Experience: A certain number of years of experience in the field of IT asset management or auditing may be required.

• Prior Certifications: Not required

7. Post-Exam Certification:

After passing the exam, you'll typically receive a certification as a Lead Auditor for ISO/IEC 19770-1:2017. T

Key Study Areas for the Exam:

• ISO/IEC 19770-1:2017 Framework: Familiarity with the clauses of the standard, including asset management objectives, software lifecycle management, and audit requirements.

• Audit Process: Detailed steps for conducting an audit (planning, fieldwork, reporting, follow-up).

• SAM Tools & Techniques: Understanding the various tools and systems used for software asset management audits.

• Risk Assessment & Compliance: Ability to assess risks associated with software asset mismanagement and compliance violations.

• Effective Communication: Skills to effectively report audit results and communicate with stakeholders.

By preparing in these areas, you will be well-equipped to sit for the ISO/IEC 19770-1:2017 Lead Auditor exam.