This two-day, interactive training course is delivered by an experienced ISO 27001 Lead Auditor and is ideal for anyone planning to take an active role in the internal auditing of their organisation’s Information Security Management System (ISMS).

Course Venue

This public course is designed to be delivered remotely via Microsoft Teams, allowing participants from across the UK—and internationally—to attend with ease. All that’s required is a secure internet connection and a device (laptop, PC, or tablet) with a working camera and microphone.

We also offer in-house training for this course, tailored for teams of any size. This can be delivered at your organisation’s premises (subject to location), at our Denton Head Office training facilities, or remotely via Microsoft Teams—mirroring the public course format.

Course Dates

Thursday 19th and Friday 20th November 2026 – Spaces Available

Course Objectives

At the end of this course, delegates will understand the following:

• • The concept of Information Security and its importance to stakeholders.
  • Recognise the benefits of a robust Information Security Management System (ISMS).
  • Interpret the key principles of ISO/IEC 27001, including its structure, clauses, and Annex A controls.
  • Understand internal audit requirements, including the Plan-Do-Check-Act (PDCA) cycle as it relates to auditing.
  • Comprehend the role and responsibilities of an Internal Auditor in an ISMS context.
  • Plan, conduct, report on, and follow up an effective ISO 27001 internal audit, including evidence gathering, reporting nonconformities, and evaluating corrective actions.

Course Content

The course is structured into two main parts: theoretical understanding and practical application.

Part One: Theory & Breakout Sessions

• Introduction to information security, risk management, and ISO 27001
• The structure of ISO/IEC 27001: key clauses and Annex A overview
• The qualities of an effective internal auditor

The four key stages of an internal audit:

• Audit Planning (including risk-based thinking and scope definition)
• Conducting the audit (evidence-based approach)
• Audit reporting and constructive feedback
• Follow-up and evaluating effectiveness of corrective actions

Part Two: Practical Audit Simulation

In this interactive session, delegates will participate in a realistic, live internal audit scenario using actual procedures and records from a fictional organisation. Activities include:

• Engaging with an auditee
• Reviewing and discussing audit evidence
• Completing an internal audit report with clearly written findings
• Hosting a closing meeting to present results professionally

Course Delivery

Led by an experienced ISO 27001 Lead Auditor with direct experience of conducting certification body audits, this course is highly recommended for professionals looking to strengthen their internal audit capability in line with the ISO/IEC 27001 standard

Course Cost

£690.00 plus VAT per delegate

For more details, information about the venue or to book your place, call 0161 667 6610 or send us an enquiry