Internal Auditor Training Program on Information Security Management System

Training Duration: 2 Days

Course Overview

This training Program is designed to provide professionals with a solid understanding of ISO/IEC 27001:2022 and the essential auditing principles and practices aligned with ISO 19011. Through real-life case studies, group exercises, and role plays, participants will gain the knowledge and hands-on skills required to effectively audit an Information Security Management System (ISMS).

Whether you're new to internal auditing or seeking to advance your information security auditing capabilities, this program empowers you to deliver valuable insights to management, improve ISMS performance, and contribute as a competent internal auditor.

What You Will Learn

• Understand the purpose, structure, and implementation of an Information Security Management System (ISMS).
• Apply the Plan-Do-Check-Act (PDCA) model to information security processes.
• Grasp auditing concepts, principles, and ISO 19011-based auditing methodologies.
• Recognize the role, skills, and competencies required for effective ISMS audits.
• Conduct audits in line with ISO/IEC 27001:2022 using planning, execution, reporting, and follow-up techniques.
• Present audit findings that can lead to measurable improvements in the organization's ISMS.

Course outline

• Understanding the purpose of an Information Security Management System (ISMS) and the processes involved in establishing, implementing, maintaining and continually improving an ISMS.
• Applying PDCA approach to information security management processes.
• Understanding the role and skills required by an auditor to perform effective audits.
• Understanding auditing concepts, auditing principles.
• Understanding the competencies required for an auditor to perform audits.
• Understanding the various methods of auditor evaluation.
• Understanding the activities involved in the audit phases (i.e., planning, conducting, reporting and follow up) in accordance with ISO 19011.

Who Should Attend?

This training program is ideal for:

• Internal auditors seeking to assess information security frameworks.
• Professionals aspiring to start a career in information security auditing.
• Project managers, consultants, and implementers of ISMS.
• Senior management including IT Heads, CISOs, and governance professionals responsible for enterprise IT risk and compliance.

Pre-requisites: Basic awareness of ISMS concepts is recommended, but not mandatory.

Examination & Certification

• Exam Format: Virtual, Objective-based
• Duration: 90 minutes
• Passing Score: 60%

Successful candidates will receive a Course Completion Certificate. Those who do not meet the passing criteria will be awarded a Certificate of Attendance.

Frequently Asked Questions