PECB Certified Course: ISO/IEC 27001 Lead Auditor

Develop the competence to plan, conduct, close and manage audits of an information security management system.

This advanced course combines ISO/IEC 27001 requirements with audit principles and the practical work needed to evaluate an information security management system (ISMS). It covers audit preparation, evidence, on-site activities, communication, reporting, closure, follow-up and audit-programme management.

The approach draws on ISO 19011 guidance and ISO/IEC 17021-1 requirements so participants can assess ISMS conformity and lead an audit team systematically.

Course at a glance

• Provider and awarding body: PECB.
• Learning format: PECB eLearning (prerecorded video sessions in English), or Self-Study (course materials for independent reading and study).
• Videos: English.
• Course materials: English for eLearning; English or Arabic for Self-Study, according to your selection.
• Level: Lead Auditor.
• Examination and certification-application cycle: 12 months from purchase for the first examination attempt, the included free retake if needed, and the certification application.
• PECB eLearning access: When you choose eLearning, PECB provides unlimited access to the course materials and prerecorded sessions.

What this course includes

• More than 450 pages of official PECB instructional materials containing explanations, guidance and practical examples.
• With eLearning: prerecorded learning sessions delivered by PECB trainers in English. Self-Study does not include videos.
• The first examination attempt and one free retake.
• The certification-application fee and the first year of the Annual Maintenance Fee, where applicable.
• A course-completion attestation worth 31 CPD credits, separate from the PECB professional credential.

What you will learn

• Explain the main ISMS concepts and ISO/IEC 27001 principles.
• Interpret ISO/IEC 27001 from the auditor’s perspective.
• Evaluate conformity using recognised audit principles.
• Prepare, conduct, close and follow up an ISMS audit.
• Manage an ISO/IEC 27001 audit programme.

Who this course is for

• Auditors who need to perform or lead ISMS audits.
• Managers and consultants responsible for the ISMS audit process.
• Professionals maintaining conformity with ISO/IEC 27001.
• Technical specialists and advisers preparing organisations for ISMS audits.

Prerequisites: Participants need a fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.

Course outline

• the ISMS and ISO/IEC 27001.
• audit principles, preparation and initiation.
• on-site audit activities.
• closing and following up the audit.
• certification examination.

Exam and credential pathway

The examination covers ISMS concepts, ISO/IEC 27001 requirements, audit principles, preparation, conduct, closure and audit-programme management. The applicable examination format follows the course rules; English is the default examination language.

PECB offers Provisional Auditor, Auditor, Lead Auditor and Senior Lead Auditor grades. The Lead Auditor grade requires five years of professional experience, including two years in information security management, and 300 hours of audit activity. Other grades have different experience thresholds. Application requirements and the PECB Code of Ethics remain applicable.

Passing the examination does not automatically issue the professional credential.

Course completion, examination success, certification application and credential issuance are separate stages; the credential is not issued automatically.

For official course details, see the PECB ISO/IEC 27001 Lead Auditor page.

Access and activation

The 12-month period for the first examination, included free retake and certification application begins on the purchase date. This period is separate from materials access. When you choose eLearning, PECB provides unlimited access to the course materials and prerecorded sessions.

Each order covers one learner. Wadi Solutions begins processing the PECB registration within one business day, and activation details are sent to the learner's email. Required enrolment details are shared with PECB for activation.

Continue your learning path

• ISO/IEC 27001:2022 Foundation: introductory understanding of the ISMS.
• Certified Management Systems Internal Auditor: internal-audit capability across management systems.
• ISO/IEC 27001 Lead Implementer: leading ISMS implementation and improvement.

Explore ISO/IEC 27001 — Information security management courses to see the available options.

Before you buy

• If you do not have a myPECB account, create one here.
• If your myPECB email differs from the email used for your Wadi Solutions order, add your myPECB email to the order notes.