Introduction
The ISO/IEC 27001 Lead Auditor training course in the eLearning format; will help you to develop the necessary skills and knowledge to perform Information Security Management System (ISMS) audits by applying widely recognized audit principles, procedures, and techniques.
Audience profile
- Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
- Managers or consultants seeking to master an Information Security Management System audit process
- Individuals responsible for maintaining conformance with Information Security
- Management System requirements
- Technical experts seeking to prepare for an Information Security Management System audit
- Expert advisors in Information Security Management
Pre-requisites
A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.
Course objectives
- Understand the operations of an Information Security Management System based on ISO/IEC 27001
- Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
- Understand an auditor’s role to plan, lead, and follow-up on a management system audit in accordance with ISO 19011
- Learn how to lead an audit and audit team
- Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
- Acquire the competencies of an auditor to plan an audit, lead an audit, draft reports, and follow-up on an audit in compliance with ISO 19011
eLearning experience
The ISO/IEC 27001 Lead Auditor eLearning training course is delivered on the KATE app. It becomes available after you log in using your PECB account.
In addition to having the training course content in the video format, you can also access the regular training course materials format, structured in training course days, with the additional files available in an editable format (depending on the training course, the case study, exercises, and correction key files will also be available).
Additionally, quizzes are part of the training course to increase interactivity between attendants and the training material.
- Take the training course
- Access the materials on KATE
- Take the exam at your most convenient date, time, and location via PECB Exams
The eLearning training courses are designed to meet the needs of diverse learners with different learning preferences and/or limited time to attend a training course session.
Course content
| Section 1: Training course objectives and structure |
| Section 2: Standards and regulatory frameworks |
| Section 3: Certification process |
| Section 4: Fundamental concepts and principles of information security |
| Section 5: Information security management system (ISMS) |
| Section 6: Fundamental audit concepts and principles |
| Section 7: The impact of trends and technology in auditing |
| Section 8: Evidence-based auditing |
| Section 9: Risk-based auditing |
| Section 10: Initiation of the audit process |
| Section 11: Stage 2 audit |
| Section 12: Preparing for stage 2 audit |
| Section 13: Stage 2 audit |
| Section 14: Communication during the audit |
| Section 15: Audit procedures |
| Section 16: Creating audit test plans |
| Section 17: Drafting audit findings and nonconformity reports |
| Section 18: Audit documentation and quality review |
| Section 19: Closing of the audit |
| Section 20: Evaluation of action plans by the auditor |
| Section 21: Beyond the initial audit |
| Section 22: Managing an internal audit program |
| Section 23: Closing of the training course |
Note: PECB certified individuals who possess Lead Implementer and Lead Auditor credentials are qualified for the respective PECB Master credential, given that they have taken four additional Foundation exams related to this scheme.
Associated certifications and exam
The “PECB Certified ISO/IEC 27001 Lead Auditor” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competency domains:
- Domain 1: Fundamental principles and concepts of an Information Security Management System (ISMS)
- Domain 2: Information security management system (ISMS)
- Domain 3: Fundamental audit concepts and principles
- Domain 4: Preparation of an ISO/IEC 27001 audit
- Domain 5: Conducting an ISO/IEC 27001 audit
- Domain 6: Closing an ISO/IEC 27001 audit
- Domain 7: Managing an ISO/IEC 27001 audit program
Certificate requirements
After successfully passing the exam, you can apply for one of the credentials shown below. You will receive the certificate once you comply with all the requirements related to the selected credential. For more information about ISO/IEC 27001 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
| Credential |
Exam |
Professional experience |
MS audit/assessment experience |
Other requirements |
| PECB Certified ISO/IEC 27001 Provisional Auditor |
PECB Certified ISO/IEC 27001 Lead Auditor Exam or equivalent |
None |
None |
Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Auditor |
PECB Certified ISO/IEC 27001 Lead Auditor Exam or equivalent |
Two years: One year of work experience in Information Security Management |
Audit activities: a total of 200 hours |
Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Lead Auditor |
PECB Certified ISO/IEC 27001 Lead Auditor Exam or equivalent |
Five years: Two years of work experience in Information Security Management |
Audit activities: a total of 300 hours |
Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Senior Lead Auditor |
PECB Certified ISO/IEC 27001 Lead Auditor Exam or equivalent |
Ten years: Seven years of work experience in Information Security Management |
Audit activities: a total of 1,000 hours |
Signing the PECB Code of Ethics |
Note: PECB certified individuals who possess Lead Implementer and Lead Auditor credentials are qualified for the respective PECB Master credential, given that they have taken four additional Foundation exams related to this scheme.
General information:
- Certification fees are included in the exam price
- Participants will be provided with the training course material containing over 450 pages of explanatory information, examples, best practices, exercises, and quizzes
- An attendance record worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course
- In case candidates fail the exam, they can retake it within 12 months following the initial attempt for free
