ISO 9001 and ISO 27001 – Interpretation and Internal Auditor Training Course

Module 1: ISO 9001 – Interpreting the Standard

• Introduction to the principles of Quality Management
• Overview of the structure and clauses in ISO 9001
• Essential terminology and definitions
• The process approach and risk-based thinking
• In-depth review of ISO 9001:2015 requirements
• Applying requirements to actual business situations
• Guidance on documentation and implementation

Module 2: ISO 9001 – Internal Auditor Training

• Defining the role and duties of an internal auditor
• Strategies for audit planning and preparation
• Leading opening and closing meetings effectively
• Techniques for interviewing and gathering evidence
• Categorizing and reporting nonconformities
• Drafting clear and effective audit reports
• Monitoring corrective action progress
• Practical audit simulations using case studies

Module 3: ISO 27001 – Interpreting the Standard

• Basics of Information Security Management Systems (ISMS)
• Core concepts and principles of ISO 27001
• Comprehensive review of ISO 27001:2022 clauses and Annex A controls
• Methods for risk assessment and treatment
• Understanding the Statement of Applicability (SoA) and documentation needs
• Navigating implementation challenges and best practices

Module 4: ISO 27001 – Internal Auditor Training

• Techniques for auditing information security controls
• Planning and carrying out ISMS internal audits
• Collecting evidence in digital environments
• Documenting information security nonconformities
• Processes for follow-up and continuous improvement
• Roleplay exercises based on realistic ISMS scenarios

Summary and Next Steps