ISO 27001 Information Security – Internal Auditor
Explains ISO/IEC 27001 and prepares staff to audit an information security management system.
At a glance
- 3 days
Who it's for
- IT and security staff
- Internal auditors
- Compliance officers
Learning objectives
- Interpret ISO/IEC 27001 requirements
- Understand Annex A controls
- Review risk assessments
- Plan and perform ISMS internal audits
Detailed content
- Clauses 4 to 10
- Scope and policy
- Statement of applicability
- Organizational and people controls
- Physical controls
- Technological controls
- Risk method
- Risk treatment plan
- Risk owners
- Audit planning
- Technical evidence
- Reporting
Day-by-day agenda
A typical schedule. In-company versions are tailored to your processes, data and timing.
- ISMS requirements
- Annex A controls
- Risk assessment
- Internal audit practice
- Case study, action plans and course assessment
Practice, tools and assessment
Hands-on practice
- Facilitate a team FMEA/risk assessment on one of your processes
- Rank risks with severity–occurrence–detection or risk matrix
- Audit simulation: plan, interview, sample evidence and write findings
- Gap analysis of your own documents against the clauses
Tools and templates you keep
- AIAG-VDA FMEA form and action-priority table
- Risk register and risk matrix (Excel)
- Clause-by-clause gap-analysis checklist
- Audit plan, checklist and report templates
How learning is assessed
- Pre- and post-course knowledge check
- Assessment of practical exercises by the trainer
- Action plan reviewed at the end of the course
Built on these standards and bodies of knowledge
- AIAG & VDA FMEA Handbook (2019)
- ISO 31000 / IEC 31010
- ISO 9001:2015 + Amd 1:2024
Certificate
Participants who complete the program and its assessment receive a certificate from The Excellence Center, which can be verified online.
New in our 2026 portfolio — tell us your dates and we will confirm the trainer and schedule.
How it is delivered
- Public courses in Cairo, in-company programs and live online training
- Practical exercises, case studies and examples from your sector
- Can also run as Train & Stay in Sharm El Sheikh, Hurghada or Cairo
Frequently asked questions
How long is ISO 27001 Information Security – Internal Auditor?
The program runs 3 days. In-company versions can be adapted to your needs.
Is the course taught in Arabic or English?
Sessions are usually delivered in Arabic with English technical terms and materials. Full English delivery is available for in-company groups.
Can you run it inside our company?
Yes. In-company programs use exercises built on your own processes. Tell us the group size and preferred timing and we will send a proposal.
Will I receive a certificate?
Participants who complete the program and its assessment receive a certificate from The Excellence Center, which can be verified online.
More programs in this field
- Integrated Internal Auditor for ISO Standards (ISO 9001, 22301, 41001, 50001 & ISO 26000 guidance)4 days
- Integrated Management Systems Internal Auditor (ISO 9001, ISO 14001 & ISO 45001)5 days
- ISO 14001:2026 – Implementing the Changes (Transition)1–2 days
- ISO 45001:2018 OH&S Management System – Internal Auditor2 days
- ISO 45001:2018 OH&S Management System – Lead Auditor5 days
- ISO 9001:2026 Internal Quality Auditing3 days
- ISO 9001:2026 QMS Lead Auditor5 days
- ISO Management Systems – Foundation, Internal Auditor & Lead Auditor Courses1 day
- ISO/IEC 17025:2017 – Laboratory Competence (Requirements, Method Validation, Uncertainty & Internal Audit)5 days
Get dates, fees and the full outline.
Tell us whether you are joining as an individual or planning a program for your team.