ISO/IEC 27001 Lead Auditor Training – PECB Certification
This five-day course prepares you to lead audits of information security management systems (ISMS) against ISO/IEC 27001. You learn to read the requirements through an auditor's eyes, plan and run an audit in line with ISO 19011 and ISO/IEC 17021-1, gather evidence, write findings and the audit report, and then manage a full audit program. Role plays and case studies run through the week so you practice interviews, sampling and nonconformity writing before the PECB exam on the final day.
The essentials
Publisher : PECB
Certification : PECB Certified ISO/IEC 27001 Lead Auditor
Duration : 5 days (exam on day 5) · 31 CPD credits
Level : Advanced
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 80 MCQs (3 options) · open book · 70% pass mark · 7 domains · online or paper-based
Exam voucher : PECB offer: exam and certification fees are included, plus one free exam retake within 12 months if you do not pass the first time.
Auditors who perform or lead ISMS certification audits
Managers and consultants who want to master the ISMS audit process
People responsible for keeping an ISMS conformant with ISO/IEC 27001
Technical experts and information security advisers
The exam
The exam takes place on day five. In its multiple-choice version it has 80 three-option questions, either standalone or scenario-based, covering seven competency domains from ISMS fundamentals to audit program management. It is open book: the standard, the courseware and your own notes are allowed. You need 70% to pass. It can be taken online with remote proctoring or on paper. Depending on your experience you then apply for Provisional Auditor, Auditor, Lead Auditor or Senior Lead Auditor. The certification is valid for three years, with an annual maintenance fee and continuing professional development requirements.
Preparation tips
Tab and annotate your copy of the standard: open book only helps if you can find things fast
Practice writing nonconformities that cite both the requirement and the evidence
Walk through the ISO 19011 steps against the case studies
Frequently asked questions (FAQ)
What experience do I need to become a Lead Auditor?
Lead Auditor requires five years of experience, two of them in information security management, and 300 hours of audit activity. Without experience you start as a Provisional Auditor.
Is the exam open book?
Yes. The ISO/IEC 27001 standard, the courseware and your own notes are allowed.
What happens if I fail?
PECB offers one free retake within 12 months. Exam and certification fees are included with the course.
Lead Auditor or Lead Implementer: which should I choose?
Choose Lead Auditor if you assess ISMSs, internally or for a certification body, and Lead Implementer if you build and run them.
How is the course delivered?
Live online, in person in Casablanca or on-site at your organization, in French or English, with more than 450 pages of PECB courseware.