Information security is now recognised as an important business process. Managed badly, it stops an organisation delivering its products and services to its customers at all, which is why customers, regulators and insurers increasingly want evidence that the management system behind it is working.
This two-day course provides guidance and practical experience in planning, executing and reporting Information Security Management System audits. It develops the specialised skills and practical knowledge needed to assess an organisation's capability to manage all aspects of information security, and follows the ISO 19011 auditing guidelines.
Learning Outcomes
Course Content
Why It Matters
Evidence that sensitive information is actually being protected, not just policied.
Cybersecurity risks identified and treated rather than carried unseen.
Confidence that the organisation can keep delivering when something goes wrong.
The areas a certification body examines, checked before they arrive.
Assurance customers, partners and regulators increasingly ask to see.
A business that stays compliant with the standard between audits, not only at them.
Who Should Attend
Before You Begin
Note: this is an auditing course rather than a technical security course. Participants do not need to be engineers, but those who understand how their organisation handles information will get more from the practical activities.
Course Details
A two-day programme available as a virtual session, a public classroom batch or an in-house delivery at your own site, which suits training an internal audit team on the system they already operate.
A combination of collaborative learning and practical activities, including structured audit exercises, so that delegates understand the key activities of auditing by doing them.
Why Choose Us
Chosen by IT, compliance and information security teams across sectors.
Trainers who audit information security management systems in the field.
Practical activities and structured audit exercises, not slides alone.
A foundation that leads into ISMS conversion and lead auditor programmes.
Part of the Quality Austria group network with international reach.
FAQ
The ISO 27001 ISMS Internal Auditor Training Course is designed to help professionals understand Information Security Management Systems (ISMS) and develop the skills needed to plan, conduct and report internal audits in accordance with ISO/IEC 27001 standards.
This course is ideal for internal auditors, IT professionals, cybersecurity teams, compliance managers, risk management professionals and individuals responsible for implementing or maintaining information security management systems within organisations.
ISO 27001 helps organisations protect sensitive information, manage cybersecurity risks, improve data security controls, ensure business continuity and strengthen trust with customers, partners and regulators.
The course covers ISO 27001 requirements, ISMS audit planning, audit execution, risk assessment concepts, information security controls, audit reporting, nonconformity management, corrective actions and ISO 19011 auditing guidelines.
No advanced technical cybersecurity expertise is required. However, a basic understanding of information security concepts, risk management and ISO 27001 requirements can help participants better understand ISMS auditing practices.
ISO 27001 Internal Auditor training helps professionals build expertise in information security auditing, strengthen compliance and risk management skills and improve career opportunities in cybersecurity, IT governance, compliance and data protection roles.
The ISO 27001 ISMS Internal Auditor Training Course is typically conducted over two days and includes practical audit activities, collaborative learning sessions and structured audit exercises.
Talk to our team about the next available batch or in-house delivery for your organisation.