This training is suitable for the following individuals:

✔ Information security professionals

✔ Internal auditors

✔ Information technology managers

✔ Cybersecurity teams

✔ Compliance and conformity professionals

✔ Risk management professionals

✔ Management system consultants

✔ Organisations wishing to establish or improve an ISO 27001 system

✔ Professionals aiming to develop their careers in information security

Benefits for Participants

At the end of the training, participants will be able to:

✔ Understand the requirements of ISO 27001:2022

✔ Evaluate information security risks

✔ Interpret information asset protection approaches

✔ Plan internal audits

✔ Conduct audit processes professionally

✔ Evaluate and report nonconformities

✔ Follow corrective action processes

✔ Prepare audit reports

✔ Apply the ISO 19011 auditing approach

✔ Contribute to continual improvement activities

Benefits for Organisations

This training may support organisations in the following areas:

✔ Improving information security performance

✔ Reducing information security risks

✔ Strengthening data security

✔ Supporting legal compliance

✔ Improving audit processes

✔ Supporting a culture of continual improvement

✔ Strengthening compliance with international standards

✔ Supporting a risk-based thinking approach

✔ Enhancing internal audit processes

ELEMENT 1 — INTRODUCTION TO INFORMATION SECURITY MANAGEMENT SYSTEMS

✔ Information security concept

✔ General information about ISO standards

✔ History of ISO 27001

✔ Benefits of Information Security Management Systems

✔ Risk-based thinking approach

✔ Information security management principles

✔ Information assets and security approach

✔ Key terms and definitions

ELEMENT 2 — STRUCTURE AND REQUIREMENTS OF ISO 27001:2022

✔ Annex SL structure

✔ Overview of ISO 27001:2022

✔ ISO 27001:2022 requirements (Clauses 4–10 and Annex A)

✔ Context of the organisation

✔ Needs and expectations of interested parties

✔ Leadership and commitment

✔ Information security policy and objectives

✔ Risks and opportunities

✔ Information security risk assessment approach

✔ Information security controls

✔ Operational control

✔ Incident management approach

✔ Performance evaluation

✔ Improvement processes

ELEMENT 3 — INTERNAL AUDIT FUNDAMENTALS

✔ Audit concept

✔ Types of audits

✔ Purpose and benefits of internal audits

✔ Responsibilities of internal auditors

✔ Audit principles

✔ Introduction to ISO 19011 auditing guidelines

✔ Ethical approach in auditing

✔ Impartiality and confidentiality

ELEMENT 4 — AUDIT PLANNING AND PREPARATION

✔ Initiating an audit

✔ Audit scope and criteria

✔ Preparing an audit plan

✔ Preparing checklists

✔ Document review

✔ Review of documents and records

✔ Risk-based audit approach

✔ Information security performance indicators

✔ Pre-audit preparation activities

ELEMENT 5 — CONDUCTING THE AUDIT

✔ Audit activities

✔ Opening meeting

✔ Interview techniques

✔ Collecting objective evidence

✔ Sampling approach

✔ Process audit applications

✔ Technical and organisational control assessments

✔ Conducting the audit

✔ Identifying nonconformities

✔ Classification of findings

✔ Effective communication techniques

✔ Closing meeting

ELEMENT 6 — REPORTING AND AUDIT FOLLOW-UP

✔ Audit report

✔ Nonconformity reports

✔ Corrective actions

✔ Basic root cause analysis approach

✔ Audit follow-up

✔ Follow-up audits

✔ Continual improvement approach

ELEMENT 7 — PRACTICAL STUDIES AND CASE ANALYSES

✔ Sample audit scenarios

✔ Case studies

✔ Examples of information security nonconformities

1. Registration Process

Registration and payment procedures are completed.

2. Platform Access

Participants receive their platform access details.

3. Training Process

Participants can access training materials 24/7.

4. Training Content and Resources

✔ Training presentations

✔ Audit practice examples

✔ Case studies

✔ Additional learning resources

5. Assessment

Participant assessment processes are completed.

6. Certification

Participants who complete the course process are eligible to receive a digital certificate of attendance / achievement.

At the end of the training, an optional examination and assessment is provided to help participants evaluate their level of knowledge.

This examination has been designed solely to help participants identify areas requiring further improvement and review the training materials again when necessary.

The examination result does not prevent participants from receiving certification. Participants who complete the training process are entitled to receive a certificate of achievement.

Successful participants are awarded an ISO 27001:2022 Internal Auditor Training Certificate of Achievement by NTSS.

Academic and technical support is provided to participants throughout the training process.

✔ Assigned tutor for each learner

✔ Communication support via email

✔ Academic guidance

✔ Feedback related to assessment processes

✔ We aim to respond to participant queries within 24 hours, excluding weekends and cases of force majeure.

There are no formal entry requirements for this training programme.

However, it is recommended that participants have a basic level of awareness of information security and management systems.

The training can be delivered in the following languages:

✔ Turkish

✔ English

✔ Participants are expected to regularly follow the training materials.

✔ Completion of practical activities is recommended.

✔ Active participation throughout the training process is recommended.

✔ Participants should inform us in case of any technical issues.

Learner Terms and Conditions

✔ Please click for the NTSS Learner Terms and Conditions.

✔ Instalment payment options are available.

✔ Discounts may be applied for payments made via EFT or bank transfer.

✔ Payment options and campaign details can be viewed during the purchasing process.

✔ In valid excuse cases, 10% of the training fee may be refunded upon application with official documentation.

✔ If you have any enquiries, please contact our Training Team: [email protected]

✔ If you are not satisfied with your training or our services, please contact us at: [email protected]

Is the training fully online?

Yes. Participants can access the training materials through the platform 24/7.

Is the training practical?

Yes. The programme includes audit practices, risk assessment activities, and case studies.

Is tutor support available?

Yes. Technical and academic support is provided throughout the training process.

Is a certificate provided at the end of the training?

Yes. Participants who successfully complete the training receive a certificate.

Are virtual classroom or face-to-face training options available?

Yes. For group training offers, you may contact us via [email protected] or review our training schedule.