ISO27001 Certified ISMS Internal Auditor Training Course

This two-day certificated training course prepares the internal auditor to effectively audit compliance with the information security standard ISO27001 and against the controls contained in ISO27002.

ISO27001 Certified ISMS Internal Auditor training provides an excellent career progression and skills development opportunity for information security staff and internal auditors. Available dates

• 7 - 8 Sep 2011 - London
• 29 - 30 Nov 2011 - London

• 27 - 28 Mar 2012 - London

Who is this course suitable for?

This course is for anyone who is going to be responsible for conducting information security internal audits and benefits everyone who is involved in information security, in internal audit, in the development and deployment of an Information Security Management System ('ISMS') or in auditing IT Service Level Agreements.

"The instructor's enthusiasm & experience were very well put across and made the course interesting and therefore easy to absorb."

Ian Stacey, Systems Security Analyst, HSBC Bank

What does this course cover?

Designed on best practice principles, based on ISO 19011:2002 internal audit best practice, this course offers guidelines for information security management systems auditing. Using ISO 19011 as the basis for internal audit, organizations can save time, effort and money by:

• Avoiding confusion over the objectives of the audit programme;
• Securing agreement of the goals for individual audits within an audit programme;
• Reducing duplication of effort when conducting combined information security/quality audits;
• Ensuring audit reports follow the best format and contain all the relevant information;
• Evaluating the competence of members of an audit team against appropriate criteria.

Whatever the reason for the audit (eg: certification, internal review, continuous improvement, contract compliance, etc) this course enables internal auditors to move efficiently through the process by applying internationally recognized guidelines, including:

• A clear explanation of the principles of management systems auditing.
• Guidance on the management of audit programmes.
• Guidance on the conduct of internal or external audits.
• Advice on the competence and evaluation of auditors.

In additional to all of the orthodox internal audit course topics this particular course covers:

• Hints and tips on introducing an internal audit regime
• The various approaches an organisation can take to its internal audit schedule, and the pro's and con's of each
• The options for resourcing internal audits and factors to consider in determining what is right for your organisation.

"The course was very clear and explained both the outline of 27001 and the main areas to consider when developing an internal audit procedure."

Anthony Wicks, IT Manager, dsicmm group ltd

Are there entry requirements?

There are no formal entry requirements, although it is assumed that delegates will have a working knowledge of information security management and the requirements of ISO27001.