Internal audits in accordance with the international standard requirements for information security management systems.

Abstract

            Currently, the advancement of information technology become backbones in various organizations. There are important information and confidential information about the organization which affecting increased demand for information security from various forms of threats that can attack an organization's information. ISO/IEC 27001 is an international standard for Information Security Management System (ISMS). The ISO/IEC 27001 has been applied as a standard in operations of various organizations in order to be effective in protecting the information assets of the organization and ensure that the operations of the organization comply with the laws, rules, regulations and various requirements. Internal audit is the basic principles of the ISO/IEC 27001, conducting internal audits is guaranteeing along with independent consulting. The internal audit becomes enrichment and improves the operations of the organization. In addition, an internal audit helps the organization achieve the goals, onward to evaluating and improving the efficiency of the risk management process Systematic and orderly control and supervision.

            The internal auditors will be conducting internal audits in accordance with requirements and controls with ISO/IEC 27001:2013 standard. The internal auditor exceptional skills and knowledge in internal audit procedures.