ISO 27001 Internal Audit and Continual Improvement

Module Information

Effective internal auditing is one of the most important elements for maintaining a strong and resilient Information Security Management System (ISMS).  Regular audits help you verify that your organisation is meeting ISO 27001 requirements, highlight areas where controls may be slipping, and identify opportunities to strengthen information security across your processes, policies, and systems.

This module explores the essential cyclical processes that keep your ISMS robust and effective: internal audits and the continuous maintenance of your Statement of Applicability (SOA). A strong internal audit process is crucial for ensuring compliance and driving continual improvement within your organisation.​

By the end of this module, you’ll understand how to plan, conduct, and act on internal audits in a way that drives meaningful improvement and enhances the overall effectiveness of your ISMS. You’ll also see how continual improvement becomes part of everyday operations, rather than a one‑off activity.

Learning outcomes

By the end of the module, you will have:

• An understanding of how to select the ‘right’ procedures to be internally audited
• Clarity on why internal audits are conducted and the internal audit process
• Determined how to report and close out internal audit findings
• Ideas on how to review and maintain the Statement of Applicability (SOA)
• Shared examples of good practice

You’ll also receive:

• An example internal audit schedule to help you plan and structure your audits
• An example internal audit report template

Is this module right for me?

This module is ideal if you:

• Want an understanding of internal auditing in the context of ISO 27001
• Are looking for ideas on how to review and maintain the Statement of Applicability (SOA)
• Prefer to learn at your own pace and in your own time
• Need a quick refresher, or are new to information security management

No prior knowledge is required.  This module is beginner-friendly and designed to help you build confidence from the ground up.

For a more in-depth look at internal auditing, our auditor-led training may be a better fit.

What’s included?

• Access to the ISO 27001 Internal Audit and Maintaining the Statement of Applicability (SOA) online training module
• An example internal audit schedule to help you plan and structure your audits
• An example internal audit report template
• Reflective questions to review your processes, identify opportunities for improvement and help you implement what you’ve learned
• A knowledge check and personalised training certificate
• Six months of access to revisit content whenever you need

How does online ISO training work?

Once payment is received, we will email your login details to you.  If you don’t receive this email, please check your junk folder or contact us.

After completing the pre-training survey, training module, and knowledge check, you can download your personalised certificate for your records.

Looking to build a stronger understanding of internal auditing?

For a deeper understanding of internal auditing, our auditor-led training provides a detailed, clause-by-clause explanation of ISO standards.  Delivered by one of our experienced lead auditors, this one-day course is designed to help you apply theory to real-life business scenarios.  You’ll also benefit from peer learning, sharing challenges and insights with other delegates.