ISO 27001:2022 Internal Auditor

Course Objectives

By the end of the course you will have an understanding in the areas of:

• The principles of auditing to ISO/IEC 27001:2022
• Audit activities
• The role of an auditor to plan, conduct, report and follow up an ISMS
• audit in accordance with ISO 19011

You will have the skills to:

• Initiate the audit
• BSI Training Academy
• ISM03001_1022 Page 2 of 4
• Internal
• Prepare the audit activities
• Conduct audit activities
• Prepare and distribute the audit report
• Complete the audit
• Audit follow-up
• Audit an ISMS to establish conformity (or otherwise) with ISO 27001

Target Audience

• Anyone who is or will be coordinating internal audit activities within your organization.
• Those who have responsibility to audit an Information Security Management System
• Existing auditors who wish to refresh their skills

Methodology

The course is aimed at those who already have an understanding of ISO/IEC 27001:2022. If you do not have this understanding, you’re strongly recommended to attend the one-day requirements training course as the requirements of this standard are not taught on this internal auditor’s course

Course Modules

Day 1

• Tutor Introduction
• Welcome and Safety Information
• Delegate Introductions
• Overview of Course Structure and Learning Objectives
• Background to Information Security Management Systems (ISMS)
• ISO 27001: Structure, Auditing Areas, Terms and Definitions
• Management System and ISMS Auditing
• Auditor Competence, Responsibilities and Characteristics
• Audit Evidence Triangle
• Types of Audit
• Audit Activities
• Creating an Audit Plan
• Checklists
• Audit Questioning Techniques: Communication and Interpersonal Skills
• Conducting the Opening Meeting
• Conducting an Audit

Day 2

• Review of Day 1 Quiz
• Work Documents
• Conducting an Audit
• Nonconformities and Writing Nonconformities
• Creating the Audit Report: Prepare, Approve & Distribute
• Conducting Audit Follow-up Activities

Course Review and Final Questions