Information Security Auditor | ISO/IEC 27001

Max Wu

Hands-on network and infrastructure experience, applied to ISO/IEC 27001 auditing that understands what is actually running.

Max Wu

About me

I work in network and IT infrastructure operations: inventorying network devices, rebuilding topology maps, reviewing configurations and looking after servers.

Along the way I noticed that a lot of security risk hides in undocumented configurations and devices nobody has inventoried. That is why I am studying ISO/IEC 27001 systematically: to bring a technical background into security auditing, so the audit covers what is actually running, not only the paperwork.

Certifications

ISO/IEC 27001:2022 ISMS Auditor / Lead Auditor Training Course

Earned

SGS ·

CQI / IRCA certified course, exam passed

Certificate No.
182387414 / 205567842
CQI / IRCA No.
716584
Verify online ↗

TPIPAS Certified Privacy Lead Auditor

Earned

Institute for Information Industry (III) ·

Certificate No.
TPIPAS-CV0167:2026
Verify online ↗

CompTIA Security+ (SY0-701)

In progress

CompTIA

Microsoft Certified: Azure Fundamentals (AZ-900)

Earned

Microsoft ·

Certification No.
FA4482-63C6F7
Credential ID
A9E8A9113D0E9D34

Microsoft Certified: Azure AI Fundamentals (AI-900)

Earned

Microsoft ·

Certification No.
178F4E-9D53EB
Credential ID
BBDFA9113A8032D4

Skills

Audits run on evidence, so every skill below links to the notes that back it up.

ISMS & auditing

  • ISO/IEC 27001:2022 clauses and Annex A controls
  • Mapping what is on the ground to specific controls
  • Collecting audit evidence: configs, logs, asset inventories

Evidence: Cisco Switch Inventory Commands, 12 Common Server Roles and Where They Store Data

Networking

  • Cisco IOS / IOS-XE switch inventory and topology discovery (CDP, LLDP)
  • Assessing VLAN, trunk, STP and VTP risks
  • Basic Juniper switch operation
  • Console access (PuTTY, Tera Term, macOS screen)

Evidence: Cisco Switch Inventory Commands, macOS Terminal Basics

Systems & infrastructure

  • Common server roles: AD, DNS, DHCP, NTP, proxy and more
  • Backup strategy (3-2-1), RAID, SAN and NAS
  • Virtualization: VMware, Hyper-V, Proxmox

Evidence: 12 Common Server Roles and Where They Store Data

Tools

  • macOS / Linux command line
  • Python (Netmiko) for automated network inventory

Evidence: macOS Terminal Basics, Cisco Switch Inventory Commands

Latest notes

Notes from my day-to-day work and self-study. Each one ends with an ISO/IEC 27001:2022 audit perspective.

All notes →

Contact

Happy to talk about information security audit roles and collaboration.