Internal Auditor of Compliance Management Systems (ISO 37301)
The course “Internal Auditor of Compliance Management Systems (ISO 37301)” is designed to prepare professionals responsible for planning, organizing, conducting, and documenting internal audits of compliance management systems (CMS).
Participants will study the requirements of ISO 37301:2021, including compliance risk assessment, verification of the compliance of policies and procedures, evaluation of the effectiveness of the compliance management system, analysis of audit evidence, preparation of audit conclusions and reports, as well as planning and monitoring of corrective actions following audits. The course also covers the requirements of ISO 19011 for planning, conducting, documenting, and evaluating the effectiveness of management system audits. A separate module is dedicated to the updates to ISO 19011:2026 for internal audit practice, including the key changes to the standard and the application of remote audit methods.
Duration
52 hours
Language
English/Ukrainian
Format
100% online
Course objective
The objective is to prepare internal auditors capable of professionally planning, conducting, documenting, and evaluating internal audits of an implemented CMS (in accordance with ISO 37301), using the guidance provided in ISO 19011, as well as developing well-founded audit conclusions and recommendations for improving the CMS.
Target audience
The course is intended for professionals responsible for the functioning, maintenance, and improvement of a CMS, as well as compliance management, risk management, security, and internal control professionals, and personnel involved in conducting internal audits in accordance with the requirements of ISO 37301:2021 and ISO 19011:2018.
Document on completion
Upon successful completion of the course, participants are awarded a certificate conferring the qualification “Internal Auditor of Compliance Management Systems”, listed in the SIC international register.
Thematic plan
The course has a total duration of 54 hours and consists of 3 training modules.
Objectives
Module 1 — Description of the requirements of ISO 37301:2021 “Compliance management systems. Requirements with guidance for use”. SIC.MODULE.ISO37301:2021
| № | Тopic | Hours |
| 1 | Introduction to the CMS | 2 |
| 2 | Context of the organization as a fundamental basis of the CMS | 3 |
| 3 | Leadership, culture and compliance policy | 2 |
| 4 | Risk-based planning of the CMS | 4 |
| 5 | Resources and documentation of the CMS | 3 |
| 6 | Operational activities and processes of the CMS | 4 |
| 7 | Evaluation and analysis of the effectiveness of the CMS | 3 |
| 8 | Corrective actions and improvements to the CMS | 2 |
| 9 | Testing | 1 |
| Hours total | 24 |
Module 2 — Conducting internal audits of management systems in accordance with ISO 19001. SIC.MODULE.ISO19011
| № | Topic | Hours |
| 1 | Audit classification and objectives | 3 |
| 2 | Audit terminology and principles | 4 |
| 3 | Audit program management | 3 |
| 4 | Audit conducting and reporting | 4 |
| 5 | Competence and personal qualities of the auditor | 2 |
| 6 | Testing | 1 |
| 7 | Case-reviews | 1 |
| Hours total | 18 |
Module 3 — ISO 19011:2026 – updates for internal auditors. SIC.MODULE.ISO19011:2026
| № | Topic | Hours |
| 1 | Key changes in ISO 19011:2026 for internal audit practice | 2 |
| 2 | Remote audit methods: selection of audit methods, evaluation of audit locations, and on-site auditing | 1 |
| 3 | Audit programme: a risk-based approach | 1 |
| 4 | Audit planning and organization using remote and hybrid audit methods | 2 |
| 5 | Methods for obtaining audit evidence | 1,5 |
| 6 | Evaluation of digital evidence and documented information | 1 |
| 7 | Competence of the internal auditor | 1 |
| 8 | Updating the internal auditor’s working tools | 1 |
| 9 | Case studies | 1 |
| 10 | Testing | 0,5 |
| Hours total | 12 |