The IS auditors require a wide range of knowledge as well as in-depth knowledge in the field of information security. Continuous further education and training of the IS auditors is a basic prerequisite for their work. Verification of such qualifications in the form of certificates (. Audit Team Leader for ISO 27001 audits based on IT-Grundschutz) are suitable for this purpose. In general, it should be ensured that actual operations in the organisation are not significantly disrupted by the IS audit when initiating the IS audit. IS auditors never actively intervene in systems, and therefore do not provide any instructions for.
