Internal Auditor Training Program on Information Security Management System based on ISO/IEC 27001:2022

This training course is structured to provide an understanding of ISO/IEC 27001:2022 requirements blended with case studies, exercises, and role play where a participant will be equipped with the knowledge and skills which are needed to assess the Information Security Management System (ISMS) of an organisation.

• Understanding the purpose of an Information Security Management System (ISMS) and the processes involved in establishing, implementing, maintaining and continually improving an ISMS.
• Applying PDCA approach to information security management processes.
• Understanding the role and skills required by an auditor to perform effective audits.
• Understanding auditing concepts, auditing principles.
• Understanding the competencies required for an auditor to perform audits.
• Understanding the various methods of auditor evaluation.
• Understanding the activities involved in the audit phases (i.e., planning, conducting, reporting and follow up) in accordance with ISO 19011.

• Internal auditors and professionals who are interested in assessing the information security management system framework within an organization.
• Personnel who want to pursue an auditing career in information security.
• Project managers or consultants responsible for establishing, implementing, maintaining, auditing and improving Information Security Management Systems within an organization.
• Top Management (IT Head, CISO etc.) and Senior Managers responsible for the IT governance of an enterprise and the management of its risks.

Knowledge on awareness on ISMS would be an added advantage.

• Understand the role and skills required by an auditor to perform effective audits.
• Understand auditing concepts, auditing principles.
• Understand the competencies required for an auditor to perform audits.
• Understand the various methods of auditor evaluation.
• Understand the activities involved in the audit phases (i.e. planning, conducting, reporting and follow up) in accordance with ISO 19011.

Candidates will be assessed through an objective based written examination (open book) at the end of the course. Exam duration is for 90 minutes. Minimum passing criteria is 60%. Candidates who score 60% in the online examination will be issued a course completion certificate. Unsuccessful candidates will be issued a certificate of attendance.

1. When can I get the certificate?
Internal Auditor Training Program on Information Security Management System certification will be issued within 21 working days from the examination date.

2. When can I get the training material and invite?
One day before the commencement of the training program.

3. How do I pay the fees for training and examination?
Online mode

4. What are the benefits of the Internal Auditor Training Program on Information Security Management System Program?

• Understand the role and skills required by an auditor to perform effective audits
• Understand auditing concepts, auditing principles
• Understand the competencies required for an auditor to perform audits
• Understand the various methods of auditor evaluation
• Understand the activities involved in the audit phases (i.e. planning, conducting, reporting and follow up) in accordance with ISO 19011

5. Is there any refund policy for the paid fees?
Please refer to Cancellation and Refund policy page.