Course: ISO27001 Internal Auditor

This two-day training course prepares the internal auditor to effectively audit compliance with the information security standard ISO27001 and against the controls contained in ISO27002 (ISO17799).

ISO27001 Internal Auditor training provides an excellent career progression and skills development opportunity for information security staff and internal auditors.

There are no formal entry requirements, although it is assumed that delegates will have a working knowledge of information security management and the requirements of ISO27001.

Designed on best practice principles, based on ISO 19011:2002 internal audit best practice, this course offers guidelines for information security management systems auditing. Using ISO 19011 as the basis for internal audit, organizations can save time, effort and money by:

• Avoiding confusion over the objectives of the audit programme
• Securing agreement of the goals for individual audits within an audit programme
• Reducing duplication of effort when conducting combined information security/quality audits
• Ensuring audit reports follow the best format and contain all the relevant information
• Evaluating the competence of members of an audit team against appropriate criteria

Whatever the reason for the audit (eg: certification, internal review, continuous improvement, contract compliance, etc) this course enables internal auditors to move efficiently through the process by applying internationally recognized guidelines, including:

• A clear explanation of the principles of management systems auditing
• Guidance on the management of audit programmes
• Guidance on the conduct of internal or external audits
• Advice on the competence and evaluation of auditors