Internal audits are important sources of information for assessing the systematic adequacy and effectiveness of information security management systems.
Above all, internal audits serve to check your own organizational and procedural specifications for compliance and effectiveness and to identify potential for improvement. This seminar focuses on the practical and effective implementation of internal audits based on ISO 27001 as well as on the correct and constructive handling of audited employees.

Objective
Participants will deepen their knowledge of ISO 27001. Auditor expertise as defined by ISO 19011:2018 will be taught in detail, as will the planning, implementation and evaluation / follow-up of internal system audits. At the end of the seminar, there is a written exam. Upon passing, participants will receive the certificate “Internal Auditor ISO 27001”.

Target group
This seminar is aimed at employees from all areas of the company who are involved in the planning, execution and follow-up of internal audits in accordance with ISO 27001, as well as at all persons who would like to acquire an “Internal Auditor ISO 27001” qualification for other reasons.

Contents

• Process-oriented information security management systems
• Contents and requirements of ISO 27001
• Interpretation of standard requirements
• Basics and objectives of audits
• Qualification requirements for auditors
• Interview techniques for auditors
• Planning and execution of internal audits based on ISO 27001
• Practice-oriented documentation of audits
• Classification and formulation of audit findings
• Deviations, potentials, measures and their follow-up
• Group work
• Final examination

Duration
2.0 day works á 8 teaching units

Prerequisites
Basic knowledge of information security management is required. This knowledge can also have been acquired through comparable training or professional experience.

Exam/Certificate
At the end of the last day there will be a written exam. After successfully passing the exam, participants receive the certificate “Internal Auditor ISO 27001”, which certifies that they have the professional competence to plan, conduct and follow up internal system audits according to ISO 27001.

Scope of services

• Comprehensive and appealing training material
• Certificate “Internal Auditor ISO 27001
• Scope for exchange of experience and knowledge transfer

The current version of ISO 27001 can be obtained from Beuth-Verlag (www.beuth.de). They can be provided by us on request for a fee.