ISO 27001 auditor training
| Sieuwert van Otterloo |
Security
ICT Institute offers a dedicated “ISO 27001 auditor” training. The training is accessible for anyone who is already familiar with ISO 27001 and wants to become an ISMS auditor, for instance to do ISMS internal audits.
About the training
The ISO 27001 auditor training was created to help people develop their audit skills. Auditing is a challenging but also rewarding role: you need a very good understanding of the ISO 27001 standard for information security to conduct an audit, but an auditor also needs to be neutral and open-minded. In this training we therefore train the following elements:
- An overview of ISO 27001 , including the difference between the High Level / Harmonised Structure (HLS and HS)
- Audit planning
- Audit execution
- Audit reporting
- Audit followup
We recommend you study the ISO 27001 controls before the training, you can find them here: ISO27002:2022 explained – Organizational controls, ISO27002:2022 explained – Physical controls , ISO27002:2022 explained – Physical controls and ISO27002:2022 explained – Organizational controls. In the training itself we assume everyone is familiar with ISO 27001 and we focus on details of the audit process.
The training is interactive: you will be asked to assess some real audit situations and challenges.
Training dates
You can find the next training dates and other opportunities on our training overview page. You can sign up by sending a mail to info or Sieuwert at ictinstitute dot nl.
Dr. Sieuwert van Otterloo is a court-certified IT expert with interests in agile, security, software research and IT-contracts. He is a also an ISO 27001 and NEN 7510 auditor and AI researcher.

