Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Internal Auditor Training has been designed to provide the knowledge and auditor skills required to evaluate the effectiveness of information security controls and to plan, conduct, report and follow up internal audits in telecommunications organisations in accordance with ISO/IEC 27011:2024 guidance.
The language of the training is Turkish. The training is delivered online.
About the Training
The training covers the purpose and structure of the ISO/IEC 27011:2024 standard, its relationship with ISO/IEC 27001 and ISO/IEC 27002, information security and cybersecurity risks specific to the telecommunications sector, access and network security, supplier management, incident management, privacy, internal audit principles, the collection of objective evidence, the identification of nonconformities and the follow-up of corrective actions.
Who Should Attend?
- Information security internal auditors
- Prospective internal auditors
- Information security and cybersecurity personnel
- Employees of telecommunications organisations
- Information technology and network management teams
- ISMS managers and system owners
- Risk, compliance and privacy personnel
- ISO/IEC 27001 internal auditors
- Technical and operational process owners
Objectives and Outcomes
The aim is to enable participants to interpret the ISO/IEC 27011 guidance correctly, assess information security controls in the telecommunications environment using a risk-based approach, and conduct internal audits in accordance with ISO 19011 principles.
By the End of the Training
Participants will be able to:
- Explain the purpose and scope of ISO/IEC 27011:2024.
- Assess the relationship between ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27011.
- Identify information security risks in the telecommunications environment.
- Audit the implementation of information security controls.
- Define the internal audit scope and criteria, and prepare an audit plan.
- Collect and evaluate objective audit evidence.
- Apply audit interview and sampling techniques.
- Document nonconformities objectively.
- Prepare an audit report.
- Monitor the implementation and effectiveness of corrective actions.
Programme and Method
Training Topics
- Relationship Between ISO/IEC 27011:2024 and ISO/IEC 27001–27002
- Information Security and Cybersecurity Risks in the Telecommunications Environment
- Organisational, Physical, People and Technological Security Controls
- Access Control, Network and Communications Security
- Supplier and Third-Party Management, Incident Management and Business Continuity
- ISO 19011 Internal Auditing Principles and Auditor Competence
- Planning the Internal Audit and Determining the Scope and Criteria
- Conducting the Audit, Interviewing, Sampling and Objective Evidence
- Audit Findings, Writing Nonconformities and Reporting
- Follow-up of Corrective Actions and Evaluation of Audit Effectiveness
Training Method
The training is delivered through subject presentations, evaluation of ISO/IEC 27011 controls, audit planning exercises, telecommunications security scenarios, objective evidence assessments, audit interviews, case studies and exercises in writing nonconformities.
Attendance and Certificate
Certification Rule
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must obtain a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
Who is the ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Internal Auditor Training suitable for?
It is intended for professionals working in information security, cybersecurity, information technology, network management, risk and compliance within the telecommunications sector who will be involved in internal audit activities.
What is the main objective of the training?
To enable participants to evaluate information security controls in the telecommunications environment systematically and objectively and to conduct effective internal audits.
Is ISO/IEC 27011 an independent certification standard?
No. ISO/IEC 27011 provides sector-specific guidance on implementing ISO/IEC 27002 information security controls in telecommunications organisations. The main certification standard for an Information Security Management System is ISO/IEC 27001.
Does the training include practical exercises?
Yes. The training includes practical exercises in audit planning, control evaluation, objective evidence gathering, interviewing, sampling, writing nonconformities and audit reporting.
Is there an examination at the end of the training?
Yes. An assessment examination is conducted at the end of the training.
References
- ISO/IEC 27011:2024 Information Security, Cybersecurity and Privacy Protection
- ISO/IEC 27001 Information Security Management Systems
- ISO/IEC 27002 Information Security Controls
- ISO/IEC 27005 Guidance on Managing Information Security Risks
- ISO/IEC 27701 Privacy Information Management Systems
- ISO 19011 Guidelines for Auditing Management Systems
Similar trainings
EXEMPLAR002ISO/IEC 27701 Privacy Information Management System Transition Training8 hours · No session plannedEXEMPLAR011ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Awareness Training8 hours · No session plannedEXEMPLAR015ISO/IEC 27017 Information Technology — Security Techniques Awareness Training8 hours · No session planned