ISO/IEC 27001:2022 - Internal Auditor

FSMQC offers ISO/IEC 27001:2022 - Internal Auditor as a separate internal auditor course. Participants study the subject modules below and apply them through the selected training track. Completion of one track does not automatically award the other tracks.
​
Catalogue code: I13-IA. Contact FSMQC to confirm the course dates, entry requirements, delivery language and applicable assessment route.

Audit selected requirements, risk treatment and control evidence. Review the statement of applicability, sample implementation and write a supported finding and follow-up.

Information security managers, IT, risk and process owners. FSMQC confirms course readiness, language and learner support needs before enrolment.

Module 1. ISMS context and responsibility
Define information, organisational scope, interested parties and security objectives. Explain management responsibility and the relationship between business priorities and information security.
​
Module 2. Risk assessment and treatment
Assess security risks using agreed criteria and select treatment. Explain documented treatment decisions and the statement of applicability, including justified inclusion or exclusion of relevant controls.
​
Module 3. Operation and supporting processes
Implement responsibilities, competence, communication and documented information. Manage risk treatment, incidents and change; connect controls to operational evidence and accountable owners.
​
Module 4. Evaluation and improvement
Plan monitoring, internal audit and management review. Analyse nonconformities and evaluate corrective action. Review the system when information assets, suppliers or risks change.

FSMQC uses instructor-led explanation, guided discussion and course-specific applied practice.
​
A fictional learning platform handling learner records through an external service provider. Use an FSMQC authored, fictional case with sufficient facts and records for independent learner work.
​
Learning resources: Asset and risk worksheets, sample applicability statement, access records and ISMS plan. Provide a learner explanation, agenda, authorised reference access, exercise instructions and feedback.
​
Assessment: A knowledge check and individual practical audit outputs assess planning, evidence gathering, findings, reporting and follow-up. FSMQC course completion does not confer ISO certification, registered auditor status or accreditation. The licensed reference and applicable amendments control delivery.

Training centre opening hours: Monday-Friday, 08:00-17:00. International venue times are local and confirmed before booking.
​
Daily sessions are arranged within the opening hours, with up to 7.5 learning hours and 1.5 hours of breaks on a full day. Shorter courses and final days finish once the required learning and assessment hours are complete.
​
Catalogue duration reference: 16 scheduled hours / 2 days. Required contact/learning hours are retained; scheduled days may be adjusted. Total qualification time and independent study are not automatically classroom hours.
​
2026 proposed cohort 1: 11 Aug 2026, 12 Aug 2026, 13 Aug 2026. Venue: Cairo, Egypt (venue to confirm).
​
Dates before 23 October 2026 are historical planning entries, not confirmation of completed delivery. Contact FSMQC for current availability and written confirmation before making travel arrangements.
​
Other eligible locations may be requested in UAE, UK, Australia or Egypt, subject to course-specific delivery approval and venue availability.

Contact FSMQC for current course fees and a written quotation. The quotation confirms dates, delivery language, learning materials, assessment arrangements and applicable charges before enrolment.