Global Governance Group

Information Security & Cybersecurity

ISO/IEC 27001 Lead Auditor

Plan, lead and report audits of an information security management system (ISMS) against ISO/IEC 27001, using internationally recognised audit practice.

Duration
5 days of content
Exam
3 hours, online
CPD credits
31
Level
Lead Auditor
Delivery
eLearning, live online or in-house

Official PECB course, enrolled through GGG, an authorised PECB partner

Course overview

The ISO/IEC 27001 Lead Auditor course develops the skills to audit an information security management system (ISMS) against ISO/IEC 27001. You learn to plan an audit, lead an audit team, gather and evaluate evidence, write nonconformities and close the audit professionally, applying the principles of ISO 19011 and ISO/IEC 17021-1.

Who should attend

  • Internal auditors and assurance professionals
  • People who want to work as certification auditors
  • Managers responsible for supplier and second-party audits
  • Consultants who prepare clients for certification audits

Why take this certification

Clients, regulators and insurers increasingly ask for evidence that information is protected. ISO/IEC 27001 is the standard they recognise.

Learning objectives

  • Apply audit principles and methods to an information security management system (ISMS)
  • Plan an audit and lead an audit team
  • Collect and evaluate objective evidence and write clear nonconformities
  • Conduct audit follow-up and close the audit professionally

Course structure

1Day 1: Introduction to the information security management system (ISMS) and ISO/IEC 27001
Covered in the PECB course materials, with exercises and quizzes to test your understanding.
2Day 2: Audit principles, preparation and initiation of an audit
Covered in the PECB course materials, with exercises and quizzes to test your understanding.
3Day 3: On-site audit activities: gathering and evaluating evidence
Covered in the PECB course materials, with exercises and quizzes to test your understanding.
4Day 4: Closing the audit: findings, reporting and follow-up
Covered in the PECB course materials, with exercises and quizzes to test your understanding.
5Day 5: Certification exam
The PECB Certified ISO/IEC 27001 Lead Auditor exam is a 3-hour exam that tests your understanding of the course competencies. You sit it online through PECB, on the last day of the course or at a time you schedule afterwards.

Examination

The PECB Certified ISO/IEC 27001 Lead Auditor exam is a 3-hour exam that tests your understanding of the course competencies. You sit it online through PECB, on the last day of the course or at a time you schedule afterwards.

Exam retake

If you do not pass the first time, you can retake the exam once for free within 12 months of your first attempt.

Certification pathway

After passing the exam you apply for the PECB credential that matches your experience: Provisional Auditor, Auditor, Lead Auditor or Senior Lead Auditor. Each step up recognises more project or audit experience.

Certification pathways

Prerequisites

No formal prerequisite. A fundamental understanding of ISO/IEC 27001 and of management systems is recommended. The Foundation course is a good preparation.

Delivery method

  • Self-paced eLearning on myPECB, studied at your own pace
  • Live online classes with a PECB-certified trainer, on request
  • In-house delivery for teams, on request
How PECB eLearning works

What’s included

  • PECB course materials (about 5 days of content)
  • The certification exam and the first-year certification fee
  • A certificate of completion worth 31 CPD credits
  • A free exam retake if you need one
  • Enrolment support from GGG from start to certificate

Frequently asked questions

How long do I have to complete the eLearning?
Access to the course runs for 12 months from activation, so you can study around work and schedule the exam when you are ready.
Is the exam included in the fee?
Yes. The exam, one free retake and the first-year certification fee are included.
Can my employer pay?
Yes. Choose to be invoiced when you send your enrolment and GGG issues the invoice to your organisation.
Can I enrol a team?
Yes. Corporate enrolments are handled by GGG, with in-house or live online delivery for groups.
Is the course available in French?
Many PECB courses and exams are offered in French and other languages. Tell us your preferred language when you enrol and we confirm availability.

Course details follow PECB’s standard format for this certification. GGG confirms the current schedule, language options and fee when you enrol.

ISO/IEC 27001 Lead AuditorPrice on request

Related certifications

Information Security & Cybersecurity