Audit day

Complete plan

When the ISO 27001 auditor questions you, it's not you being graded, it's the system. Three rules for answering, and the right reaction to a rule that gets in your way: ask for an exception, don't work around it.

  • 3 min
  • 3-question check
  • English · Français
  • Attestation

You will be able to

  • Answer an auditor by describing what you actually do, and say "I don't know" rather than make something up
  • Show where the rule and the evidence are: policy, procedure, training certificate
  • Ask for an exception or report a rule that blocks you instead of working around it; know what a nonconformity is

The module

3 min
  1. Audit day 2 min
  2. Knowledge check

    3 questions, pass mark 80 %. Explanations after each answer; you can try again.

  3. Attestation

    One per person, with the date, the score and the frameworks covered — anyone can check it online with its code.

Sources
  • ISO Survey 2024, sept. 2025 (96 709 certificats ISO/IEC 27001 valides)
  • ISO/IEC 17021-1:2015, § 3.12, 3.13 (non-conformité majeure, mineure), § 9.1.3 (audits de surveillance), § 9.5, 9.6
  • ISO/IEC 27001:2022, § 7.2, 7.3, 9.2, A.6.4

Version 1 · updated October 4, 2026

On the same topics

Micro-module Free

MFA fatigue: the attack that counts on you being tired

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g)ISO/IEC 27001 A.6.3
See the content →
Micro-module Free

Phishing: 3 seconds not to click

A phishing email is won or lost in 3 seconds: spot the warning signs, apply the stop – check – report reflex, and know what to do if you have already clicked.

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g)ISO/IEC 27001 A.6.3
See the content →
Micro-module Essentials plan

One password, every door

One reused password opens every account once it leaks. See how attackers do it, then switch to a password manager, passkeys and MFA.

  • 2 min
  • EN · FR
NIS2 Art. 21(2)(g), (j)ISO/IEC 27001 A.5.17, A.6.3
See the content →