SC135: Internal Auditor

Agenda:

• Normative foundations and systematics of the audit process
  • Standards requirements regarding audits according to ISO 19011, ISO 27006, ISO 17021
  • Requirements for an internal audit according to ISO/IEC 27001 and ISO 22301
  • Continuous improvement
    
    
• Types of audits
  • Internal/external audit, supplier audit
  • System audit, process audit, product audit
    
    
• Requirements of ISO/IEC 27001
  • Specifics of auditing an ISMS
    
    
• Requirements of ISO 22301
  • Specifics of auditing a BCMS
    
    
• The audit process
  • Structured preparation and follow-up - From planning to CIP
    
    
• Planning, preparation, execution of audits
  • Initiating the audit
  • Document review
  • Preparing for audit activities
  • Audit activities
  • Audit closure
  • Audit follow-up actions
    
    
• Evaluation and analysis of audit results
  • Closing meeting
  • Making audit findings
  • Audit report
  • Non-conformities and corrective actions
  • Corrective action sheet
    
    
• Behavior in the audit
  • Audit interview techniques
  • Positive/negative behavior of the auditor
  • Behavior of the auditee
  • Principles for the audit
    
    
• Optimization of audit planning
  • Definition of the audit scope
  • Variants of auditing – who audits what and how, audit evidence
  • Integrated auditing – leveraging synergies with other management systems and assessments
    
    
• Interfaces and distinction to external audit by a certification body
  • Basics of accreditation and certification procedures DAkkS (German Accreditation Body)
  • Selection of the appropriate certification body
  • Outlook Lead Auditor
    
    
• Upon request, the training can also be supplemented with special topics such as TISAX, BAIT, VAIT, KAIT, ZAIT, other ISO management systems or industry-specific content. Contact us.

Objectives:

• As an internal auditor, you are a central component of the continuous improvement process of corporate processes and the management system.
• You can assess whether an implemented management system meets the requirements of the standard.
• You derive appropriate measures based on audit findings and monitor their implementation up to the effectiveness evaluation.
• You accompany external audits by certification bodies and clients (supplier audits).

At the end of the SC135 Internal Auditor training, there is an opportunity to take an exam. All exam content is covered in the seminar. Upon passing, a separate qSkills™ certificate is issued.

The certificate title is: "Internal Auditor for ISO/IEC 27001 and ISO 22301"

Target audience:

The training course SC135 Internal Auditor is aimed at:

• Management System Officers
• Prospective Auditors
• Specialists and Executives

Prerequisites:

Description:

As an internal auditor, you are responsible for the internal audit program as well as the audit planning and execution of internal audits. In this training, learn the tools of an internal auditor. The focus of the training is on the management systems ISO/IEC 27001 and ISO 22301, with synergies to ISO 9001 and other management systems being highlighted.

qSkills™ recommends the following advanced courses/learning paths:

• SC150 ISMS Auditor/Lead Auditor ISO 27001:2022 (IRCA™ 2575)
• BC150 BCMS Auditor/Lead Auditor ISO 22301:2019