ISO/IEC 27001 Lead Auditor training enables you to develop the necessary expertise to perform an Information Security Management System (ISMS) audit by applying widely recognized audit principles, procedures and techniques.  

including the official test costs  

40 Hours by Official 👑MASTER Trainer

ISO27001 Lead Auditor

Who should attend?

- Auditors wishing to carry out and lead information security management system (ISMS) certification audits

- Managers or consultants wishing to master the information security management system audit process

- Individuals responsible for maintaining compliance with information security management system requirements.

- Technical experts wishing to prepare for an information security management system audit. 

- Expert consultants in information security management.

Training program Duration: 5 days

Day 1 Introduction to the Information Security Management System (ISMS) and to ISO/IEC 27001

- Training objectives and structure

- Standards and regulatory frameworks

- Certification processes

- Fundamental concepts and principles of information security

- Information security management system (ISMS)

Day 2 Audit principles, audit preparation and initiation

- Audit concepts and fundamentals

- Impact of trends and technology on auditing

- Evidence-based auditing

- Risk-based auditing

- Initiating the audit process

- Stage 1 of the audit

Day 3 On-site audit activities

- Preparing for stage 2 of the audit

- Stage 2 of the audit

- Communication during the audit

- Audit procedures

- Creation of audit test plans

Day 4 Closing the audit

- Drafting of audit findings and non-conformance reports

- Audit documentation and quality review

- Closing the audit

- Auditor's evaluation of action plans

- After the initial audit

- Managing an internal audit program

- End of training

Day 5 Certification exam

Training objectives

On completion of this course, participants will be able to:

- Explain the basic concepts and principles of an information security management system (ISMS) based on ISO 27001

- Interpret ISO 27001 requirements for an ISMS from an auditor's point of view

- Assess the conformity of the ISMS to ISO 27001 requirements, in accordance with fundamental auditing concepts and principles.

- Plan, conduct and close an ISO 27001 compliance audit, in accordance with the requirements of ISO/IEC 17021-1, ISO 19011 guidelines and other good auditing practices.

- Manage an ISO/IEC 27001 audit program

Exam Duration: 3 hours

The PECB Certified ISO/IEC 27001 Lead Auditor exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following areas of competence:

- Area 1 Fundamental principles and concepts of an information security management system (ISMS)

- Area 2 Information Security Management System (ISMS)

- Area 3 Audit concepts and fundamentals

- Area 4 Preparing for an ISO/IEC 27001 audit

- Area 5 Performing an ISO/IEC 27001 audit

- Area 6 Closing an ISO/IEC 27001 audit

- Area 7 Managing an ISO/IEC 27001 audit program