Advanced · Self-paced learning
Inquiry This course is not yet bookable.
Plan an internal audit of a selected ISMS process. Define the assignment, criteria and sample, and consider who can audit independently. Work through an audit file, write findings and prepare a report for management.
The case file contains a current approval list and an access-removal procedure. Two former employees’ accounts remained active after the deadline. You substantiate a finding for those cases and specify a further sample. The two cases do not establish how often the problem occurs across the process.
A tool is planned for the course to record criteria, evidence and findings. Use these to produce your own audit file and report. Keep the completed data for future audits.
Take away an audit file with criteria, a sample and supported findings, together with an audit plan and draft report. Open questions identify where further evidence is needed.
Basic ISMS knowledge and authorised access to process documentation and audit criteria. An audit file from a course case can replace confidential information.
Planned as 12–16 hours of self-paced study with document review and written case work. Annotated examples support your self-checks.
Planned learning time: 12–16 hours
