Compliance management system internal auditor (ISO 37301, ISO 19011)
This online course provides the knowledge and skills necessary for conducting an audit of the compliance management systems (CMS) in accordance with the requirements of ISO 37301:2021, ISO 19011:2018.
Training participants will acquire knowledge about the CMS components, learn how to mitigate the risks of interaction with sanctioned persons, what documents are required for the implementation of the CMS and how to continually improve the CMS and its effectiveness, as well as the tasks and roles of internal auditors in the process of planning and conducting audits, reporting, planning and monitoring activities and actions based on the results of audits.
Duration
52 hours
Language
English/Ukrainian
Format
100% online
Course objective
This course aims to ensure that organizations comply with legislative and regulatory requirements, as well as improve the efficiency and transparency of their operations.
Participants will develop the competencies necessary for effective compliance management in organizations, which will help reduce risks, enhance trust from clients and partners, and ensure the stable development of the business.
Target audience
- external auditors of management system certification bodies;
- lead auditors who are involved in certification, surveillance, and recertification audits;
- candidates for external auditors who are undergoing training or qualification to work within certification bodies;
- auditors involved in integrated and combined management system audits.
The course is aimed at professionals who have basic knowledge of management system standards and perform independent, impartial assessments of organizations.
Document on completion
CMS internal auditor certificate, listed in the SIC international registry
Thematic plan
Module 1 — Compliance management systems (ISO 37301)
Module 2 — Internal audit (ISO 19011)
Module 3 — ISO 19011:2026 – updates for internal auditors. SIC.MODULE.ISO19011:2026
The program is designed for 52 hours, including time for studying theoretical material and taking tests.
Objectives
Module 1 — Compliance management systems (ISO 37301)
| # | Topic | Hours |
| 1 | Foreword. Framework of the standard | 1,5 |
| 2 | Context of the organization | 2,5 |
| 3 | Leadership | 2,5 |
| 4 | Planning | 2,5 |
| 5 | Support | 3 |
| 6 | Operation | 3,5 |
| 7 | Performance evaluation | 2,5 |
| 8 | Improvement | 1 |
| 9 | Examples of documents | 4 |
| Testing | 1 | |
| Hours total | 24 |
Module 2 — Internal audit (ISO 19011)
| # | Topic | Hours |
| 1 | Introduction | 1 |
| 2 | General provisions of the standard | 2 |
| 3 | Audit program management (AP) | 5 |
| 4 | Performing the audit | 5 |
| 5 | Competence of auditors | 2 |
| Testing | 1 | |
| Hours total |
16 |
Module 3 — ISO 19011:2026 – updates for internal auditors. SIC.MODULE.ISO19011:2026
| # | Topic | Hours |
| 1 | Key changes in ISO 19011:2026 for internal audit practice | 2 |
| 2 | Remote audit methods: selection of audit methods, evaluation of audit locations, and on-site auditing | 1 |
| 3 | Audit programme: a risk-based approach | 1 |
| 4 | Audit planning and organization using remote and hybrid audit methods | 2 |
| 5 | Methods for obtaining audit evidence | 1,5 |
| 6 | Evaluation of digital evidence and documented information | 1 |
| 7 | Competence of the internal auditor | 1 |
| 8 | Updating the internal auditor’s working tools | 1 |
| 9 | Case studies | 1 |
| 10 | Testing | 0,5 |
| Hours total | 12 |