نظرة عامة على الدورة
The ISO/IEC 20000-1:2018 (ITSMS) Internal Auditor Training programme is delivered by MEGADEMİ, an Exemplar Global Certified Training Provider, for professionals who need practical, evidence-based competence in ISO/IEC 20000-1 and in technology governance & assurance. The curriculum is developed and taught by practising auditors, implementers and consultants working across manufacturing, services, technology, healthcare, energy, public sector and supply chains. Delivery combines instructor-led teaching, facilitated discussion, scenario work, document-review exercises, written assignments and a supervised assessment. Participants work through the purpose and intent of ISO/IEC 20000-1, requirement by requirement, and then into structured workshops that mirror real audit engagements — internal audits, second-party audits and, where relevant, third-party certification audits. On successful completion candidates receive a MEGADEMİ course completion certificate. A course certificate and personnel certification are two separate things: personnel certification is applied for directly to a personnel certification body such as Exemplar Global, whose auditor categories set their own training, examination and audit-experience requirements.
أهداف التعلم
- Explain the purpose, scope, structure and evolution of ISO/IEC 20000-1
- Interpret each requirement of ISO/IEC 20000-1 and translate requirements into operational controls and measurable objectives
- Apply Annex SL (the harmonized structure), risk-based thinking, the process approach and the Plan-Do-Check-Act cycle
- Plan, prepare, lead and report internal auditor activities in alignment with ISO 19011:2026
- Design audit programmes and individual audit plans that are risk-prioritised and resource-balanced
- Gather sufficient and appropriate objective evidence using observation, interviewing, sampling and document review
- Write clear, factual, defensible nonconformities tied to specific requirements and evidence
- Evaluate the effectiveness of corrective action, root cause analysis and continual improvement
- Manage auditor behaviour, ethics, confidentiality and conflict-of-interest situations professionally
- Communicate findings to executive leadership and drive measurable performance improvement
وحدات الدورة
Module 1 — Context, governance and the business case for ISO/IEC 20000-1+
- •History, ownership and revision cycle of ISO/IEC 20000-1
- •Strategic value of certification for technology governance & assurance
- •Stakeholder map: top management, customers, regulators, certification bodies
- •Linking the standard to organisational strategy, ESG and risk appetite
Module 2 — Terms, definitions and the Annex SL harmonized structure+
- •Common vocabulary: conformity, nonconformity, opportunity, risk, evidence
- •Annex SL ten-clause architecture and cross-standard integration
- •Process approach, risk-based thinking and PDCA in practice
Module 3 — Requirements of ISO/IEC 20000-1, section by section+
- •Context, leadership and planning (clauses 4–6)
- •Support, operation, performance evaluation and improvement (clauses 7–10)
- •Sector-specific interpretations and common implementation pitfalls
- •Documented information: what is mandatory, what is pragmatic
Module 4 — Risk, opportunities and controls in technology governance & assurance+
- •Risk identification, analysis and evaluation aligned with ISO 31000
- •Designing proportionate controls and key performance indicators
- •Integration with operational, financial and reputational risk registers
Module 5 — Audit programme and individual audit planning+
- •Building an annual internal audit programme
- •Audit objectives, scope, criteria and resource allocation
- •Audit types: internal, supplier and second-party audits, and remote audit activity
- •Sampling methodology, remote auditing and travel logistics
Module 6 — Conducting the audit: evidence, interviewing and observation+
- •Opening meeting protocol and stakeholder management
- •Open questions, layered questioning and active listening techniques
- •Tracing processes end-to-end (vertical and horizontal trace audits)
- •Evaluating documented information vs. operational reality
Module 7 — Findings, classification and reporting+
- •Writing factual, complete, defensible findings (the "5C" rule)
- •Major vs. minor nonconformity, observation and opportunity for improvement
- •Audit report structure, closing meeting and post-audit communication
Module 8 — Corrective action, root cause analysis and follow-up+
- •Containment, correction and corrective action — the critical distinction
- •RCA techniques: 5 Whys, fishbone, fault tree, Apollo, Bowtie
- •Verification of effectiveness and lessons-learned loops
Module 9 — Auditor competence, behaviour and ethics+
- •ISO 19011:2026 personal behaviour and competence framework
- •Confidentiality, impartiality, independence and conflict of interest
- •Handling difficult auditees, disagreements and cultural difference
Module 10 — Examination, certification routes and continual development+
- •Mock audit exercise: full simulated internal engagement
- •Written examination preparation and exam technique
- •How personnel certification works: schemes such as Exemplar Global, their requirements and CPD
- •Building a career portfolio: audit log, witnessed audits, sector specialisation
البرنامج اليومي
Day 1
Foundations of ISO/IEC 20000-1 and the audit discipline- 08:30 Welcome, learner contract, expectations and pre-assessment
- 09:00 History, governance and business value of ISO/IEC 20000-1
- 10:30 Terms, definitions and Annex SL and the process approach
- 12:30 Lunch & networking
- 13:30 Clause walk-through — Context, Leadership, Planning
- 15:30 Workshop: stakeholder mapping and scope statement
- 17:00 Day-1 reflection and pre-read for day 2
Day 2
Deep dive into the content of ISO/IEC 20000-1- 08:30 Recap quiz and review
- 09:00 Support, Operation (clauses 7–8) — controls and documented information
- 10:30 Performance Evaluation (clause 9) — monitoring, internal audit, management review
- 12:30 Lunch
- 13:30 Improvement (clause 10) — nonconformity and corrective action
- 15:00 Workshop: building a risk-based control matrix
- 17:00 Daily reflection log
Day 3
Audit programme, planning and preparation- 08:30 Recap and clarifications
- 09:00 ISO 19011:2026 — managing an internal audit programme
- 10:30 Audit plan, checklist design and sampling strategy
- 12:30 Lunch
- 13:30 Role-play: opening meeting and stakeholder communication
- 15:00 Workshop: building an audit checklist for a real process
- 17:00 Preparation for tomorrow's full simulation
Day 4
Full audit simulation — evidence, findings and reporting- 08:30 Briefing for the simulated audit
- 09:00 Simulated audit — opening meeting, interviews, document review, observation
- 12:30 Working lunch
- 13:30 Drafting findings (5C rule) and the audit report
- 15:30 Closing meeting role-play and feedback
- 17:00 Debrief and personal development plan
Day 5
Corrective action, ethics, examination- 08:30 Root cause analysis workshop (5 Whys, fishbone, Bowtie)
- 10:00 Auditor behaviour, ethics and conflict of interest
- 12:30 Lunch
- 13:30 Final written examination (invigilated, closed-book where required)
- 16:00 Personalised feedback, personnel certification routes and graduation
المتطلبات المسبقة
- General awareness of the relevant standard — a refresher module is included on day one
- Familiarity with your organisation's processes, risks and stakeholders
- No previous audit experience required
لمن تُوجَّه هذه الدورة
- Internal Auditors, consultants and audit team members working with ISO/IEC 20000-1
- Quality, EHS, information security, sustainability, compliance and operations leaders
- Management representatives and process owners preparing for certification or recertification
- Professionals who need to satisfy the training requirement of a personnel certification scheme
- Suppliers and supply-chain managers required to demonstrate conformance to ISO/IEC 20000-1
دراسات حالة وورش عمل
- ▸A multinational manufacturer integrating ISO/IEC 20000-1 across 14 plants on four continents — scope, harmonisation and certification strategy.
- ▸A regulated service provider responding to a major nonconformity raised during a surveillance audit — root cause, corrective action and retention of certification.
- ▸A fast-growing SME using ISO/IEC 20000-1 as a commercial differentiator to win enterprise tenders in technology governance & assurance.
- ▸A public-sector body using the standard to demonstrate accountability and resilience to citizens and oversight bodies.
التقييم والاختبار
Daily knowledge checks, workshop participation, peer feedback and instructor observation across every module.
Invigilated written paper of ninety minutes covering interpretation and internal audit practice — multiple-choice and scenario-based questions.
Full role-play assessment evaluating audit planning, evidence collection, finding-writing, closing meeting and report quality.
70% overall, with no individual section below 60%. One supervised re-sit is included in the course fee.
الشهادة
Successful candidates receive the ISO/IEC 20000-1:2018 (ITSMS) Internal Auditor Training course completion certificate issued by MEGADEMİ, an Exemplar Global Certified Training Provider. The certificate carries a unique verification number. It is a course completion certificate: it does not by itself make the holder a certified auditor. Personnel certification is applied for separately to a personnel certification body such as Exemplar Global, according to the requirements of the relevant auditor category. Digital credentials, a printable PDF and a verifiable badge are issued within five working days of successful completion. CPD logging guidance is provided.
Course certificate and personnel certification
On successful completion you receive a MEGADEMİ course certificate confirming the training and assessment you completed. This course is not listed as a registered course in the MEGADEMI-EUROTECH LLC entry of the Exemplar Global Client Register, so no Exemplar Global course-level registration is claimed for it.
MEGADEMI-EUROTECH LLC is an Exemplar Global Certified Training Provider. That is a provider-level status. Personnel certification is granted separately by a certification body against its own published scheme requirements, including audit experience.
Check the Exemplar Global Client RegisterWhere this course fits
The standard page lists every course for this standard; the training-level page compares course levels before you book. Whole teams are usually better served by in-house delivery.
References and official sources
الأسئلة الشائعة
What kind of certificate does the ISO/IEC 20000-1:2018 (ITSMS) Internal Auditor Training course provide?+
MEGADEMİ is an Exemplar Global Certified Training Provider and issues a course completion certificate at the end of the programme. Provider certification covers our training system; personnel certification is a separate step, applied for directly to the personnel certification body.
What is the duration and delivery format?+
Standard duration is 5 days. We deliver live online (instructor-led, fully interactive), in classroom in major international cities, and as a blended programme. In-house corporate delivery is available globally in English, Turkish and on request in other languages.
Do I need prior experience with ISO/IEC 20000-1?+
Familiarity with management systems and the relevant standard is helpful but not mandatory. A pre-course primer, glossary and self-assessment quiz are provided so every participant starts from a shared baseline.
How is the course assessed?+
Assessment combines continuous evaluation, a full audit simulation and a final invigilated written examination. The pass mark is 70% overall, with one supervised re-sit included in the course fee.
What materials and post-course support are included?+
Participants receive a comprehensive course manual, all workshop templates, audit checklists, finding-writing guides, six months of post-course Q&A access with the lead trainer, and access to course updates when the underlying standard is revised.
Does this course make me a certified auditor?+
No. The course is designed to satisfy the training requirement of personnel certification schemes. To become a certified auditor you must meet the training, examination and audit-experience requirements of the relevant category and apply separately to a personnel certification body such as Exemplar Global.
Can MEGADEMİ deliver this programme in-house for our team?+
Absolutely. We deliver tailored in-house and corporate training globally, with content adapted to your sector, processes and audit programme. Volume discounts apply from six participants. Contact our corporate training team for a proposal.
Technically reviewed by Eren İŞMAN, Lead Auditor and technical reviewer, MEGADEMİ-EUROTECH LLC. Last technically reviewed .
