Artificial Intelligence Auditor acc. to ISO 42001

Internal audits as a powerful tool for system improvement

Overview

This course covers the theory behind conducting internal and external audits, based on the audit process set out in ISO/IEC 19011.

This includes

• relevant terms and definitions, as well as
• the process steps from the Plan–Do–Check–Act cycle.

Course objective

Participants will be able to plan and conduct audits, document the results, and evaluate and improve the audit process. Furthermore, participants will be familiar with the individual steps of the audit process and will be able to adapt them to their organisation. Participants are familiar with the relevant documented information – such as the audit programme, audit plan, checklist and audit report – and are able to prepare it. Audits can be carried out, and the necessary information is gathered, evaluated and reported to the client using appropriate communication techniques.

Duration: 1 day

Between Auditor and Developer. Systemic Thinking, Effective Communication

Overview

Auditors face a dual challenge during an audit: on the one hand, they must act as expert auditors; on the other, as forward-thinking development agents. Auditors liaise with both senior management and operational management. In addition to specialist knowledge, auditors require strong interpersonal skills, the ability to think holistically and recognise cross-departmental system interdependencies, as well as a firm grasp of the basic principles of communication. Theory and practice complement each other in a balanced way in this seminar: the second day of the course is primarily devoted to training through role-plays.

Course objective

Participants practise thinking in terms of systemic relationships, gain an understanding of the skills required of an auditor, and master the basic principles of communication in theory and practice.

Duration: 2 days

Building on the knowledge of ISO 42001 acquired in the AI Manager course and the content covered in the Audit Techniques and Psychological Principles courses, this module focuses specifically on the requirements for conducting audits of ISO 42001 management systems.

The examination content relates to the following two courses:

• Audit Techniques
• Psychological Principles
• ISO/IEC 42001 Standard

Admission to the examination

Registration for this examination must be made in writing to CIS GmbH, and the candidate must demonstrate that they meet the admission requirements. If the candidate has completed the training as part of the CIS course series, the training will be automatically recognised, provided that they have attended at least 80 per cent of each course module.

Should a candidate wish to have other training courses recognised, it is necessary to have the equivalence of these courses to the certification programme assessed. A separate, written application must be submitted to establish this equivalence. The application must be accompanied by a description of the training courses completed and a comparison of these with the requirements of the certification programme. The relevant requirements can be obtained from the certification body. A qualification check is carried out to verify compliance with the certification programme and to ensure that the references provided by the applicant are up to date. This consists of an oral technical interview lasting between 30 and 60 minutes and is conducted by an assessor. The defined training content as set out in the certification programme serves as the basis.

Further examination requirements

• Valid CIS ‘Artificial Intelligence Manager’ certificate
• Completion of the CIS Artificial Intelligence Auditor training course or equivalent training
• Proof of at least 2 years’ professional experience in the field of artificial intelligence or information security within the last 3 years
• 4 audits conducted or supervised, totalling at least 15 audit days in the field of artificial intelligence or information security management (including preparation and follow-up work, within the last 3 years)

Conducting the examination

The examination must be taken in writing. It consists of multiple-choice questions and lasts 1 hour.

Upon passing the examination, the certificate ‘Artificial Intelligence Auditor in accordance with ISO/IEC 42001’ will be issued; if the candidate lacks professional experience and/or audit evidence, the certificate will bear the designation ‘Candidate’.

Auditor Candidate: It is still possible to sit the exam even without sufficient professional experience or proof of auditing experience. In this case, you will be granted the status of Auditor Candidate; as soon as you have gained the necessary practical experience, we will amend your certificate free of charge – a simple, unbureaucratic process that reflects our commitment to quality. Please note: Candidate status cannot be extended.

Validity period of the certificate

3 years

Certificate renewal criteria

• Proof of 2 years’ professional experience in information security management or in the field of artificial intelligence within the last 3 years
• Evidence of having carried out 4 audits totalling at least 15 audit days in information security management or in the field of artificial intelligence
• One CIS continuing professional development course (refresher) within the last 3 years.