Sue,

I have clear that BS7799 is an standard for management of IT security
and that became an auditor is just being able to know if the processes
of a company follow or not the standards. Now, to became an auditor I
need to take a curse and an exam, both a little expensive (I live in
Mexico) so my friends and I are investigating if this skill is demanded
in security IT market or not so we can evaluate if it worth the efforth
or not.