ISO/IEC 27001:2022 Information Security Management Systems Internal Auditor (SkillsFuture-supported)*

At the end of the course, you will be able to:

• Appraise the common functions of a cybersecurity framework for organisations.
• Evaluate the need to implement an information security management system based upon the context of the organisation and leadership commitment
• Mitigate potential risks through analysis of risk profiles for different areas of the organisation.
• Determine security implementation priorities by utilizing relevant methodologies and framework implementation tiers.
• Propose mitigation strategies and tactics for information security implementation risks
• Lead process improvement for information security management system
• Evaluate defence-in-depth strategies and controls by conducting internal audits of the information security management system.

The ISO 27001 internal auditor course will provide guidance and hands-on experience in the planning, execution, and reporting of Information Security Management System audits.

• Introduction to ISMS
• Key changes in ISO 27001:2013 vs ISO 27001:2022
• Objectives and benefits of an ISMS
• Key principles and concepts of the ISMS
• Code of practice ISO/IEC 27001:2022
• Certification specification ISO/IEC 27001:2022
• Certification to ISO/IEC 27001:2022
• The ISO 27000 series of standards
• The ISMS Audit Planning
• The ISMS Audit Preparation
• Conducting an ISMS Audit
• Recording the results
• Root Cause Identification
• Presenting reports
• Conducting Audit Follow-Up

The ISO 27001 internal auditor certification is ideal for anyone aspiring to advance their career in the information security sector. This includes:

• Managers or executives responsible for the security and confidentiality of their business-critical information
  
• People who wish to understand and conduct internal audit assessments of the ISO 27001:2022 certification standard and its relation to the emerging ISO 27000 series of standards for information security management
• Internal Auditors
• Compliance Officers
• Consultants

Prior experience is not required to attend this course, but a basic understanding of information security concepts is helpful.

• Here are some of the career prospects for ISO/IEC 27001:2022 Information Security Management System internal auditors:
• Information security manager/consultant/auditor
• Compliance officer
• Risk manager
• Security architect/engineer/analyst/researcher

The course content and structure are designed by the domain experts from TÜV SÜD. With immense experience and knowledge of the relevant standards, our team of product specialists and technical experts at TÜV SÜD have developed the course content based on the current business landscape and market requirements.

There will be two modes of assessment at the end of the class, namely, a written test and a case study assessment.

1. Can I also attend e-learning courses on top of attending the ISO/IEC 27001:2022 Information Security Management System Internal Auditor course?
Yes, you can register for any e-learning course at TÜV SÜD.

2. What is the funding eligibility criteria?
Self-sponsored learners: Up to 50% of course fees for Singapore Citizens and Permanent Residents between 21 and 39 years old, and up to 70% of course fees for Singapore Citizens above 40 years old.

Company-sponsored learners:
1. SME employers who sponsor the following persons can apply for up to 70% funding
2. All employers can apply for absentee payroll
a. Singapore Citizens and PR: $4.50 per hour, capped at $100,000 per enterprise per calendar year
b. Singapore Citizens aged 30 and above (or Persons with Special Needs aged 13 and above), earning a monthly salary ≤$2,500: 95% of hourly basic salary, capped at $13 per hour

3. How do I enroll for the ISO/IEC 27001:2022 Information Security Management System Internal Auditor course?
To enrol and check your eligibility for SSG funding, please click on ‘Request training schedule’ button and fill up the form. Our team will contact you for the next steps to evaluate your eligibility for this course and enrolment procedures.

Non-Refundable Application Fee: The total course fee includes a non-refundable application fee of 5%. This fee will be collected during the online checkout process. The Applicant acknowledges and agrees that the application fee is non-refundable under any circumstances, regardless of the outcome of the application.

4. What is the SO/IEC 27001:2022 Information Security Management System Internal Auditor course methodology?

Participants will learn through lectures, case studies, group exercises and discussions.

5. Can I get a refund if I cancel my enrolment?

Yes, please contact us at [email protected] for more details. Terms and conditions apply.

6. Will there be any mid-course assessments?
There will be no formal mid-course assessments, but you must complete case studies throughout the course. These case studies will help you assess your understanding of the material and identify areas where you need further support.

• The lecturer is very professional and experienced. He was able to answer most of the challenging questions, and the lecture was lively.
• A conducive classroom environment was provided, and the lunch was delicious. The team of IT engineers from Entrust Network learned a lot and enjoyed the training.
• The learning journey was satisfying and rewarding lifelong. We highly recommend the training program by TUV SUD.

Jamson Lim
IT Director
Entrust Network

The open discussions and the uses cases for various scenario brought up by the lecturer is useful to me. The insights change the way I am looking at the problems and its resolutions.

Kenny Tew
Director
Magicsoft Asia Systems Pte Ltd