I. INTRODUCTION

1. An introduction for training participants to topics related to the audit process in accordance with the guidelines of ISO 19011:2018. An explanation of what an internal audit is, and a discussion of the types of audit.
2. Discussion of terms and definitions related to internal audits as specified in ISO 19011:2018.
3. Description of the roles and responsibilities of the audit team and those supporting the audit team:
   • lead auditor,
   • internal auditor,
   • observer,
   • technical expert.
4. Presentation and explanation to training participants of the guidelines in ISO 19011:2018 regarding the competence and assessment of management system auditors and audit teams.
5. Presentation and explanation of the new auditing principles to training participants. Interpretation of the risk-based approach in the audit process in accordance with the guidelines of ISO 19011:2018.

II. INITIATING THE AUDIT AND PREPARING AUDIT ACTIVITIES IN ACCORDANCE WITH THE GUIDELINES OF ISO 19011:2018

1. Familiarising training participants with the stages of an internal audit.
2. Presentation of the key elements of an audit:
   • resources,
   • purpose,
   • frequency,
   • scope,
   • criteria.
3. Extended ISO 19011:2018 guidelines on developing an audit programme:
   • discussion of risk analysis in audit programme management,
   • discussion of responsibilities and authorities related to developing an audit programme,
   • presentation of the principles for developing an audit programme,
   • discussion of the elements of an audit programme,
   • presentation of sample audit programmes.
4. Drawing up an audit plan:
   • presentation of the principles for drawing up an audit plan,
   • discussion of the components of an audit plan,
   • presentation of sample audit plans.
5. Creating checklists:
   • presentation of types of checklists – advantages and disadvantages of using different types of checklists,
   • presentation of methods for creating checklists,
   • presentation of examples of checklists.

EXERCISES: Completion of 3 exercises designed to teach participants how to prepare for an audit by learning to select audit criteria and create checklists

III. CONDUCTING AUDIT ACTIVITIES IN ACCORDANCE WITH ISO 19011:2018 GUIDELINES

1. Discussion of the purpose of the opening meeting:
   • elements of the opening meeting,
   • persons participating in the opening meeting,
   • duration of the opening meeting.
2. Presentation of the principles of conducting an internal audit.
3. Discussion of communication during the audit between the auditor and the auditee:
   • appropriate and inappropriate behaviour of the auditor and the auditee during the audit.
4. Presentation of audit techniques:
   • methods of gathering information during the audit,
   • conducting audit interviews, formulating questions and using checklists during the audit,
   • reviewing documents and records during the audit,
   • observation during the audit.
5. Characteristics of types of non-conformities:
   • a discussion of when a non-conformity should be identified and when an observation should be noted.
   • methods of communicating information about a non-conformity or observation to the auditee.
6. Presentation of sample audit situations applying audit principles.
7. Discussion of the purpose of the closing meeting:
   • elements of the closing meeting,
   • persons attending the closing meeting,
   • duration of the closing meeting.

EXERCISES: Completion of 3 exercises designed to teach the auditee how to apply audit principles.

IV. PREPARATION OF THE AUDIT REPORT, CONCLUSION OF THE AUDIT, POST-AUDIT ACTIVITIES IN ACCORDANCE WITH ISO 19011:2018 GUIDELINES 

1. Discussion of documents and records resulting from the audit:
   • elements of the audit report,
   • elements of the non-conformity record.
2. Discussion of how to report non-conformities and observations:
   • how to prepare an audit report and a non-conformity record,
   • how to formulate conclusions in the audit report and non-conformity record,
   • presentation of a sample audit report,
   • presentation of sample non-conformity records,
   • submission of the audit report and non-conformity records.
3. Discussion of post-audit activities.

EXERCISES: Completion of 1 exercise during which training participants will learn to prepare post-audit documentation independently and consolidate the knowledge gained.

V. REQUIREMENTS OF ISO 27001:2023

1. Key principles of ISO 27001:2023
   1. Overview of key terms and definitions used in the standard.

2. Overview of the requirements of the standard’s clauses
   • Context of the organisation
   • Leadership
   • Planning
   • Support
   • Operation
   • Performance evaluation
   • Improvement

3. Overview of Annex A
4. Summary of the training