Skip to Main Content
Select regional store:
Learn for less: Save 10% on high-quality foundation and auditor training. Find out more
ISO 27001 Internal Audit Service

ISO 27001 Internal Audit Service

SKU: 4785
Format: 1 year
Availability: Always Available
Format: 2 year (save 5%)
Format: 3 year (save 10%)

Outsource your internal audit to a qualified auditor with deep experience of ISO 27001 and the audit process, and gain the assurance you need to ensure you meet your clients’ and stakeholders’ demands. This service consists of two separate audit days spread over one year.

Buy now, pay later! Enjoy the benefits of paying by purchase order with an IT Governance corporate account. Apply online today or call our sales team on +1 877 317 3454.

 COVID-19: remote delivery options

We would like to reassure our clients that all training and consultancy services will go ahead as scheduled during the current COVID-19 situation. As a company that fully embraces flexible and remote working, we are adjusting our delivery methods to allow us to provide consultancy services, penetration tests and training remotely where necessary. Please also refer to our COVID-19 policy.

Price: $5,700.00

Remove the guesswork from your ISO 27001 audits with an experienced auditor on your side

Implementing an ISO 27001-compliant ISMS requires ongoing maintenance and review to meet the Standard’s requirements in clauses 8 and 9. The internal audit is an essential element of this process, and it must be carried out as described in clause 9.2 of ISO 27001 and should be conducted at planned intervals.

Without the experience of a seasoned audit professional, the internal audit can be challenging to undertake, especially when the organization is new to ISO 27001.

Get a specialist on board to conduct your internal audit and leave all the checking and verification to us.

Our auditors are qualified and experienced lead auditors with both knowledge of current audit practices and practical implementation experience, enabling you to benefit from additional remediation advice.

You will receive a detailed audit report highlighting any nonconformities identified, which will help you meet the Standard’s requirements for an objective and impartial audit process. The report will provide the required assurance as to whether the ISMS continues to conform to management’s requirements and to those of ISO 27001.

What's included?

What does this service cover?

  • Audit day one: audit of conformance to requirements in clauses 4–10 of ISO 27001:2013;
  • Audit day two: audit of selected ISMS controls and control effectiveness.

Your internal audit will include the following:

  1. Document review;
  2. Follow-up—a review of whether all the corrective actions raised during any previous audits have been closed
  3. Organizational "walkthrough" to observe the implementation of management system requirements
  4. Interviews with relevant staff
  5. The production of an internal audit report, ready for management review, which presents a summary of all the nonconformities found


  • The price is applicable for SMEs with up to 50 employees, based upon a single main site. Minor, additional sites may be included in the scope of the audit—however no visit to other sites will take place. For larger organizations, please contact us for a custom quote by emailing
  • Consultant expenses related to travelling, etc. are not included in the price.
  • Discounts for multi-year audits only apply when a two- or three-year contract is agreed at the purchase of the first test; discounts cannot be backdated.
  • The service fee will be invoiced annually (in the year of the audit). An invoice will be issued 28 days before the first planned audit in the year.

Customer reviews

This website uses cookies. View our cookie policy