Introduction
The ISO/IEC 27001:2022 Internal Auditor Certification (ISO 27001 IA) is awarded by the Global Institute of Professional Management Certification (GIPMC). It covers how to plan, carry out, report and follow up internal audits of an information security management system (ISMS) against ISO/IEC 27001:2022.
ISO/IEC 27001:2022 is published by ISO and the IEC, and this credential is awarded by GIPMC, not by ISO.
GIPMC aims it at internal auditors, information security and ISMS professionals, risk and compliance staff, IT managers, process owners and management system auditors.
BlueMorpho Learning Solutions is your training and enrollment partner for ISO 27001 IA. We help you understand the requirements, plan your preparation and enroll for the exam. GIPMC conducts the exam and issues the certification.
Key Highlights
- Internal audit focus: Thirteen modules run from ISMS concepts and the requirements of ISO/IEC 27001:2022 to evidence, findings, reporting and follow-up.
- Risk-based approach: Audit planning follows the organization's context, risks and Annex A controls.
- Online proctored exam: 90 objective multiple-choice questions, including scenario-based questions, in 120 minutes, with a 70% pass mark.
- Optional study material: Listed by GIPMC at 129 USD (regular 199 USD).
Curriculum
GIPMC's ISO 27001 IA outline has 13 modules:
- Understand Information Security and ISMS Concepts: confidentiality, integrity and availability, and how an ISMS manages risk.
- Understand ISO/IEC 27001:2022 Requirements: the clauses, changes from earlier versions and Annex A, with its 93 controls in four themes.
- Internal Audit Principles and Ethics: competence, independence, objectivity and confidentiality.
- Planning an Internal ISMS Audit: scope, objectives, criteria, risk-based planning and checklists.
- Understanding Organizational Context and Risks: internal and external issues, interested parties and risk-driven audit focus.
- Evaluating Information Security Controls: control design and implementation, and mapping risks to Annex A.
- Conducting Audit Activities: opening meetings, interviews, observation and verifying evidence.
- Evaluating Operational and Technical Controls: access control, operations security, incidents, continuity and logging.
- Identifying Nonconformities and Improvement Areas: classifying findings, root causes and opportunities for improvement.
- Audit Reporting and Documentation: objective reports, presenting findings and keeping records.
- Corrective Actions and Follow-Up: checking corrective action plans and closing findings.
- Management Review and Continual Improvement: feeding audit results into management review.
- Supporting Certification and Surveillance Audits: helping your organization prepare for external audits.
We help you work through each module and practise deciding whether evidence shows conformity or a finding.
Course Benefits
- Practical audit skills: Learn to plan an internal audit, gather evidence and write findings management can act on.
- A stronger ISMS: Help your organization find control weaknesses early and prepare for external audits.
- Exam readiness: Understand the exam format (90 questions in 120 minutes, 70% to pass) and practise managing your time.
Post-Course Accomplishments
After completing your ISO 27001 IA preparation and passing the exam, you will be able to:
- Plan internal audits: Set scope, objectives and criteria, and build a risk-based plan and checklist.
- Gather evidence: Interview staff, observe activities and review records against ISO/IEC 27001:2022.
- Write sound findings: Classify nonconformities, note improvement opportunities and report clearly.
- Follow up: Verify corrective actions and close findings on evidence.
- Support improvement: Feed audit results into management review.
Exam at a glance
| Item | Details |
|---|---|
| Awarding body | Global Institute of Professional Management Certification (GIPMC) |
| Credential | ISO/IEC 27001:2022 Internal Auditor Certification (ISO 27001 IA) |
| Format | Objective multiple-choice questions (MCQs) with scenario-based questions |
| Number of questions | 90 |
| Duration | 120 minutes |
| Passing score | 70% |
| Delivery | Online proctored |
| Fee (USD) | Certificate: 349 USD (listed price; regular 500 USD). Optional study material: 129 USD (listed price; regular 199 USD). |
| Prerequisites | Not listed on GIPMC's credential page. Ask our team before you enroll. |
| Validity and renewal | GIPMC describes renewal but does not state a period. Renewal involves continuing professional development or a knowledge refresh, a renewal assessment or verification where applicable, and an application before expiry. |
| Retakes | Not stated on GIPMC's credential page. |
Fees are in USD, were checked in October 2026 and can change.
Exam details checked in October 2026. Always confirm on GIPMC's official credential page before booking.
Why Choose BlueMorpho for ISO 27001 IA Certification
- Clear guidance: We explain the exam format, how online proctoring works and whether you need the optional study material, so you know what to buy and what to expect.
- Preparation planned around GIPMC's modules: We help you plan your study around the 13 ISO 27001 IA modules and the published exam format.
- Enrollment support: We guide you through enrollment and answer your questions along the way.
Conclusion
ISO 27001 IA is a practical credential for anyone who audits or supports an ISMS from inside the organization. If you want a structured way to build and show internal audit skills, send us an enquiry to get started.
