New Batch Staring 22nd February 2026!
Internal Auditor Training ISMS (Information Security Management System)
To enable participants to gain a practical knowledge of how to seek compliance & audit information security management system to comply with the requirements as per ISO 27001:2022. This course will also help you to learn the benefits of having an integrated management system in your facility.
Talk to our expert
OR
Candidates from outside India will receive our call on WhatsApp. Please Click here to save our number to recognize us as known and solicited caller.
Trusted by executives from global enterprises
Why should you attend?
The ISO 27001:2022 Internal Auditor course provides essential skills and knowledge to audit and maintain your organization & Information Security Management System (ISMS) in line with
international best practices. Attending this course will enable participants to:
- Understand the requirements of ISO 27001:2022 and how to apply them.
- Effectively conduct internal audits, ensuring continuous improvement of the ISMS.
- Ensure that your organization remains compliant and secure, minimizing risks of
- security incidents.
- Enhance your role in managing information security by gaining the expertise needed
- to identify gaps and recommend corrective actions.
Who should Participate?
This course is well suited for:
- Information Security Officers and Managers – To manage the ISMS and ensure
- compliance.
- Internal Auditors – To perform regular audits of the ISMS.
- Compliance Officers – To ensure regulatory and policy adherence.
- IT and Risk Managers – To manage IT security risks and mitigate vulnerabilities.
- Process Owners – Responsible for processes involving sensitive or confidential data.
- HR, Legal, and Finance Personnel – To understand how ISMS relates to their
- processes.
- Consultants – Assisting clients in implementing and maintaining ISO 27001
- certification.
Learning Objective
By the end of this course, participants will:
- Understand ISO 27001:2022 Requirements
- Conduct an ISO 27001:2022 Internal Audit
- Improve ISMS Effectiveness
- Enhance Auditing Skills
- Apply ISO 19011 Auditing Guidelines
Internal Auditor Training on ISMS Course Details
Topics Covered
- Overview of ISO/IEC 27001 and importance of information security
- ISMS structure and lifecycle
- Role of internal audit in the ISMS lifecycle
- ISO 27001 requirements (Clauses 4–10)
- Overview of Annex A controls and ISMS risk management
- ISMS risk assessment process
- Auditing ISMS as per ISO/IEC 27001:2022
- Internal audit process overview (ISO 19011 aligned)
- Audit planning, scope, objectives, and criteria
- Audit plan and audit checklist preparation
- Conducting ISMS internal audit
- Opening meeting and audit communication
- Writing effective audit reports
- Categorizing non-conformities
- Proposing corrective actions
- Monitoring and closing corrective actions
- Creating an audit plan
- Creating an audit checklist
- Conducting a mock Opening Meeting
Duration | 12 Hours |
Mode of Delivery | Online (Weekend Classes / Live Instructor-led) |
Batch Schedule | Current Batch: 22nd Feb -28th Feb & 1st March 2026 Time: |
Trainer | Mr. Yegneshwara Iyer |
You will receive |
|
Assessment Schedule, Structure and Passing Requirements | Assessment shall be conducted at the end of instructor-led training Date: 7th March 2026 Timing: Duration: 30 Minutes |
Fees | Indian Participants (Resident Indian Citizens): ₹ 2,999 (All Inclusive) International Participants (Foreign Nationals / NRIs): |
Training Partner | SMC Services |
| How to register? | Click here to Register |
Know the Trainer
Yegneshwara Iyer
Senior ISACA-Certified Cybersecurity Trainer
K Y Iyer brings over 30 years of experience in enterprise IT, cybersecurity, and governance. A certified CISA, CISM, and CDPSE professional, he’s a renowned ISACA trainer, mentoring thousands since 2012 for CISA and cybersecurity certifications. Empaneled with ICAI for the DISA program, Iyer simplifies complex audit, risk, and security concepts using real-world case studies and interactive methods.
With a background as CIO, CTO, and CISO, he offers practical insights into NIST, ISO 27001, COBIT, GDPR, and domains like cloud security and enterprise applications. Known for structured, exam-focused delivery, he blends storytelling and actionable frameworks to prepare professionals for certifications and real-world challenges in cybersecurity and governance.
Certification
Upon successful completion of Internal Training on ISMS, the candidate will be awarded a certificate of completion from GISA Council for Security Research and Education.
