ISO 27001 Internal Auditor Training

Course Overview

This course is designed to  provide participants with the knowledge and skills required to perform an audit of an Information Security Management System (ISMS) based on the ISO 27001:2022 standard. The course focuses on the principles of auditing, the conduct of an audit and the interpretation of the ISO 27001:2022 standard in the context of an audit. 

 Course Objectives:

• Understand the purpose and benefits of an ISMS based on ISO 27001:2022
• Understand the principles and concepts of auditing 
• Develop the skill to plan, conduct and report on an ISO 27001:2022 audit 
• Understand the roles and responsibilities of a lead auditor 
• Interpret the requirements of ISO 27001:2022 in the context of an audit 
• Understand the risk-based approach to auditing 

Course Content: Module 1: Introduction to ISO 27001:2022 and ISMS 

Introduction to ISO 27001:2022

• The benefits of implementing an ISMS 
• Overview of the ISO 27001:2022 standard 
• Principles of information security 
• 
  

Module 2: Auditing Principles 

Principles of auditing 

Types of audits 

Roles & Responsibilities of auditors 

Planning an audit 

Module 3: Conducting an Audit 

Conducting an opening meeting 

Gathering audit evidence

Interviewing techniques 

Documenting findings 

Module 4: Reporting and Follow-up

Preparing and audit report 

Communicating findings to stakeholders 

Follow-up activities 

Closing the audit 

Module 5: ISO 27001:2022 Requirements 

Overview of the ISO 27001:2022 standard

Context of the organization 

Leadership 

Planning

Support 

Operation 

Performance Evaluation 

Improvement 

Module 6: Risk-based Auditing 

Risk-based approach to auditing 

Risk assessment and risk management 

Risk-based audit planning 

Who should Attend : This course is designed for individuals who want to become lead auditors for an ISMS based on ISO 27001:2022. This includes :

Information security managers and consultants 

IT professionals 

Auditors 

Quality professionals 

Risk managers 

Compliance managers 

Benefits : Upon completion of this course, participant will have the knowledge and skills to:

Plan and conduct an ISO 27001:2022 audit 

Interpret the requirement of ISO 27001:2022 in the context of an audit 

Understand the risk-based approach to auditing 

Report on and communicate findings to stakeholders

Learn a team of auditors to perform an audit of an ISMS based on ISO 27001:2022

Study Material

§  Lecture sessions are illustrated with examples based on real cases

§  Practical exercises are based on a case study which includes role playing and discussions

§  Practice tests are similar to the Certification Exam

End of the Course 

Additionally successful completion of the course and the exam will provide participants with the necessary qualification to become a certified lead auditor for ISO 27001:2022