# ISO/IEC 27001 Internal Auditor (training course)

> Plan and conduct effective internal ISMS audits.

URL: https://securei3.com/training/iso-27001-internal-auditor/
Level: Internal auditor
Duration: 2 days
Formats: Virtual instructor-led, In-house
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube

## Who should attend

- Internal auditors
- ISMS team members
- Compliance staff

## Learning outcomes

- Plan an audit using ISO 19011
- Gather and assess evidence
- Write clear findings

## Overview

A two-day course that teaches you how to plan and carry out effective internal audits of an information security management system against ISO/IEC 27001:2022, following the guidance of ISO 19011:2026. The emphasis is on practice: interviewing, sampling evidence, writing clear findings and following up corrective actions.

## Why attend

- Meet the internal audit requirement of ISO/IEC 27001 clause 9.2 with competent auditors
- Find real improvement opportunities, not just paperwork gaps
- Prepare your organisation for certification and surveillance audits
- Build an audit programme that fits your risks

## Agenda

### Day 1: Audit principles and preparation
- ISO/IEC 27001:2022 requirements refresher
- Audit principles and ISO 19011:2026 guidance
- Audit programme and risk-based planning
- Preparing the audit plan and checklists
- Sampling and gathering objective evidence

### Day 2: Conducting and reporting the audit
- Opening meetings and interview techniques
- Auditing Annex A controls: practical exercises
- Grading nonconformities and observations
- Writing clear, factual findings
- Closing meetings, reporting and follow-up
- Test

Prerequisites: Familiarity with ISO/IEC 27001, for example through our Awareness course or working on an ISMS.
Assessment: Continuous assessment and test. Continuous assessment during the audit exercises and role plays, plus a 60-minute multiple-choice and short-answer test. Pass mark 70%. Participants who pass receive a certificate of achievement; others receive a certificate of attendance.
CPD hours: 14

Included:
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions

## Frequently asked questions

### How are virtual sessions run?

Live, instructor-led sessions on Microsoft Teams or Zoom, with breakout rooms for exercises, the same materials as the classroom and short breaks every 90 minutes. You need a stable internet connection and a webcam.

### Can this course be run for our team only?

Yes. We deliver it privately, online or at your premises, and use examples from your own systems. In-house delivery is usually more cost-effective for six or more participants.

### How much does it cost?

Fees depend on format, location and group size. Send an enquiry and we will reply with dates and a quote within one working day.


Enquire: https://securei3.com/training/iso-27001-internal-auditor/#enquire