The course focuses on training professionals in financial services to conduct effective internal audits of the Information Security Management System (ISMS) based on the ISO 27001 standard. Throughout the program, it covers the principles and practices of internal auditing, as well as the specific requirements of the ISO 27001 standard within the context of financial services.

Participants will learn to plan, conduct, and manage internal ISMS audits efficiently and effectively. A detailed understanding of auditing processes and procedures will be provided, including risk area identification and assessment of compliance with ISO 27001 requirements.

The course also addresses preparation for external audits and management of audit findings, as well as result communication and report preparation. Emphasis is placed on the importance of independence and impartiality in the auditing process, as well as the need to maintain confidentiality of sensitive information throughout.