ISO 27001 Auditor Bootcamp
Become an ISO 27001 Auditor.
Learn to plan and run ISO 27001 audits (clause-by-clause logic, evidence collection, finding writing and CAPA) and finish ready for internal and lead-auditor support roles.
Choose how you learn
One bootcamp. Three ways to take it.
3Same role-based outcome. Pick the format that fits your life. Read it at your own pace with graded feedback, watch the video track, or join the live quarterly cohort.
Instructor-led
Watch the instructor teach on video: a guided track with self-checks, per-module interview prep and a hands-on lab.
In development
Self-paced
Read the full course in the portal at your own pace: lessons, graded quizzes and assignments your instructor reviews.
Available now in the Fourth Tech Hub
Live cohort
Real-time sessions with the practitioner on a quarterly schedule: accountable, interactive, and capped for attention. We open these as cohorts are scheduled.
Next cohort · To be announced
Roles this prepares you for
- ISO 27001 Internal Auditor
- ISO 27001 Lead Auditor support
- Compliance Auditor
- GRC Auditor
Standards & references
You'll build a portfolio of
- Internal audit plan
- Audit checklist
- Findings report
- CAPA follow-up memo
The curriculum
The 8 modules
8Audit Principles & Auditor Mindset
What an audit is, audit types, ethics, independence and risk-based auditing.
Understanding ISO 27001 for Audit
Clause-by-clause audit logic, mandatory documents and tracing requirements to evidence.
Audit Planning & Scope
Objectives, scope, criteria, audit program, request lists and the opening meeting.
Interviewing & Evidence Collection
Interview techniques, document review, sampling and validating objective evidence.
Control Testing & Gap Identification
Design vs operating effectiveness, conformity vs nonconformity, root cause basics.
Writing Findings & Audit Reports
Structuring findings, nonconformities, recommendations and the audit report.
CAPA & Follow-Up Audits
Corrective actions, closure validation, follow-up audits and repeat findings.
Auditor Job Readiness
Internal/lead auditor workflow, interview questions, portfolio and a mock audit.
The challenge
Anyone can find a problem. Can you write a finding that holds?
Auditing is not spotting what is wrong. It is evidencing it precisely enough that a defensive management team accepts it, and grading it so the grade survives challenge.
Nonconformity is a judgement, not a feeling
Major, minor, observation. Getting that wrong in either direction costs you the room: too harsh and you are argued with, too soft and nothing changes.
Evidence, not opinion
A finding is a clause, a requirement, what you saw, and why the two do not meet. Anything less is an opinion with a reference number.
The conversation is the hard part
Closing meetings are where audits are won or lost, and no amount of standard-reading prepares you to sit in one.
The transformation
From reading the standard to signing the report
The ISMS first, because you cannot audit what you do not understand, then the audit, then assurance.
You can quote a clause
You can evidence a gap against it in writing somebody will accept
Findings are things that looked wrong
Findings are graded, evidenced and traceable to a requirement
An audit plan is a calendar invite
You scope, sample and plan an audit, and can defend the sample
Corrective action is the auditee's problem
You test root cause and verify closure rather than accepting a promise
Assurance means the audit happened
You can say what assurance the work actually provides, and what it does not
Describes the capabilities this programme is designed to develop. Results vary with experience and effort. Completing a programme does not guarantee employment, promotion or acceptance by any employer.
The programme in numbers
What you actually receive
53
Hours of instruction
22
Modules
78
Lessons
22
Graded quizzes
8
Marked assignments
3
Courses included
Counted from the courses this enrolment grants, not written by hand, so they cannot drift from what you receive.
- ISO 27001:2022 Lead Implementer & Auditor Bootcamp — 6 modules, 29 hours
- ISO 27001 Lead Auditor Exam Prep — 6 modules, 7 hours
- Cybersecurity Audit & Assurance (Advanced) — 10 modules, 17 hours
Curriculum
What you will study, module by module
Phase 1: The ISMS you will be auditing
- 1.ISO 27001 & the ISMS: Clauses 4 to 104 hours
- 2.Context, Leadership & Planning (Clauses 4-6)5 hours
- 3.Annex A & the Statement of Applicability5 hours
- 4.Operation & Implementing the Controls5 hours
- 5.Performance Evaluation & the Internal Audit5 hours
- 6.Certification, Nonconformities, CAPA & Capstone5 hours
Phase 2: Leading an audit
- 7.Audit Principles & ISO 190111 hour
- 8.Audit Planning & Program Management1 hour
- 9.Conducting the Audit & Gathering Evidence1 hour
- 10.Nonconformities & Corrective Action1 hour
- 11.Audit Reporting & Follow-Up1 hour
- 12.Exam Readiness & Practice Exam2 hours
Phase 3: Assurance and reporting
- 13.Risk-Based and Integrated Audits1h 30m
- 14.Testing Across NIST, ISO, and SOC Simultaneously1 hour
- 15.Control Rationalization, Crosswalks, and Data Analytics1 hour
- 16.Assurance Reporting, Program Management, and QA1h 30m
- 17.Auditing AI and Automated Decision Systems2 hours
- 18.Auditing Cloud Environments2 hours
- 19.Auditing DevSecOps and CI/CD Pipelines2 hours
- 20.Auditing Privacy and Data Protection Controls2 hours
- 21.Continuous Auditing and Continuous Controls Monitoring2 hours
- 22.Fraud Risk, Management Override, and Forensic-Aware Auditing2 hours
Calendar
A plan that fits around work
Week 1
9 hours
- 1.ISO 27001 & the ISMS: Clauses 4 to 10
- 2.Context, Leadership & Planning (Clauses 4-6)
Week 2
10 hours
- 3.Annex A & the Statement of Applicability
- 4.Operation & Implementing the Controls
Week 3
5 hours
- 5.Performance Evaluation & the Internal Audit
Week 4
12 hours
- 6.Certification, Nonconformities, CAPA & Capstone
- 7.Audit Principles & ISO 19011
- 8.Audit Planning & Program Management
- 9.Conducting the Audit & Gathering Evidence
- 10.Nonconformities & Corrective Action
- 11.Audit Reporting & Follow-Up
- 12.Exam Readiness & Practice Exam
Week 5
9 hours
- 13.Risk-Based and Integrated Audits
- 14.Testing Across NIST, ISO, and SOC Simultaneously
- 15.Control Rationalization, Crosswalks, and Data Analytics
- 16.Assurance Reporting, Program Management, and QA
- 17.Auditing AI and Automated Decision Systems
- 18.Auditing Cloud Environments
Week 6
8 hours
- 19.Auditing DevSecOps and CI/CD Pipelines
- 20.Auditing Privacy and Data Protection Controls
- 21.Continuous Auditing and Continuous Controls Monitoring
- 22.Fraud Risk, Management Override, and Forensic-Aware Auditing
Total 53 hours across 22 modules. Hours are the time the material is built to take, not a cap: nothing stops you going slower or faster.
Fit
Is this programme for you?
This is for you if
- You want the audit seat: internal audit, second-party supplier audits, or a route toward lead auditor work.
- You already work in security or compliance and are asked to review other people's controls.
- You can read a standard and want to learn to evidence against it.
- You will write the findings. They are marked, and the writing is the skill.
This is not for you if
- You want a certificate for a CV line without doing the written work.
- You need an accredited or regulator-recognised qualification. This is a Fourth Tech certificate, not an accredited award, and we say so rather than implying otherwise.
- You want to build the management system rather than examine it. That is the ISO 27001 Implementor programme.
- You need a certified Lead Auditor qualification recognised by a certification body. This develops the capability; that exam is somebody else's.
Outcomes
What you will be able to do
- Plan an ISO 27001 audit: scope it, sample it, and defend the sample
- Evidence a nonconformity against a specific clause, in writing an auditee will accept
- Grade findings as major, minor or observation, and justify the grade
- Run an opening and closing meeting without losing the room
- Test corrective action for root cause rather than accepting a promise
- Write an audit report that says what assurance it provides and what it does not
What you need
- No prior experience in the field. The programme starts from the vocabulary.
- A computer with a modern browser. The labs run in the browser, so no virtual machine and no particular operating system.
- Time for the written assignments. They are marked against a rubric, and skipping them removes the only thing that distinguishes you afterwards.
- No audit experience. The programme starts from what an audit is for.
Your path to the certificate
- 01
Enrol
Pay once and the programme opens in your portal immediately.
- 02
Work the phases
Each phase is a complete course in its own right, sequenced so the work compounds.
- 03
Submit the assignments
Each module has a quiz marked on our server and an assignment marked against a rubric.
- 04
Build the capstone
A single piece of work across the whole programme, which becomes your portfolio centrepiece.
- 05
Earn the certificate
Issued with a unique ID and a public verification page anyone can check.
Hands-on labs
You don't watch. You do.
6Next cohort · To be announced
Secure your seat for $2,000.
You're in as soon as you pay: the full program opens in your portal right away, to work through at your own pace. When a live cohort is scheduled you'll get its day-by-day plan and sessions as well, and cohorts are capped at 20 seats.