ISO/IEC 27001 Lead Auditor Training 5 day-training (31 Hours) - PECB exam included (with 1 free retake)

Course and Learning Objectives

Our ISO/IEC 27001 Lead Auditor training course, accredited by PECB, is designed to prepare you to audit an information security management system (ISMS) based on ISO/IEC 27001. 

The training content consists of practical exercises and case studies that provide you with real-world knowledge that you can apply to your day-to-day operations and activities. Practical exercises will enable you to master audit techniques and become competent in managing an audit programme, an audit team, communicating with clients and resolving conflicts.

By the end of this training, participants will be able to:

• Explain the basic concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
• Interpret the ISO/IEC 27001 requirements for an ISMS from an auditor's perspective
• Evaluate the ISMS against the ISO/IEC 27001 requirements according to the basic audit concepts and principles
• Plan, conduct and complete an ISO/IEC 27001 compliance audit according to the requirements of ISO/IEC 17021-1, the guidelines of ISO 19011 and other audit best practices
• Manage an ISO/IEC 27001 audit programme

Training Content

Day 1 - Introduction to the information security management system (ISMS) and ISO/IEC 27001

• Standards and regulatory frameworks
• Certification process
• Fundamental concepts and principles of information security
• Information security management system (ISMS)

Day 2 - Audit principles, preparation, and initiation of an audit

• Fundamental audit concepts and principles
• The impact of trends and technology in auditing
• Evidence-based auditing
• Risk-based auditing
• Initiation of the audit process
• Stage 1 audit

Day 3 - On-site audit activities

• Preparing for stage 2 audit
• Stage 2 audit
• Communication during the audit
• Audit procedures
• Creating audit test plans

Day 4 - Closing the audit

• Drafting audit findings and nonconformity reports
• Audit documentation and quality review
• Closing of the audit
• Evaluation of action plans by the auditor
• Beyond the initial audit
• Managing an internal audit program
• Closing of the training course

Day 5 - Certification Exam (9 to 12:30)

As well as explaining what the ISO/IEC 27001 standard requires you to do, this course tells you how to do it through a variety of activities, exercises, case studies, multiple-choice stand-alone quizzes and scenario-based quizzes. These allow you to test your knowledge of the steps in the implementation process.

This course is designed for:

• Auditors wishing to perform and lead Information Security Management System (ISMS) audits
• Managers or consultants wishing to master the Information Security Management System audit processs
• Individuals responsible for maintaining compliance with ISMS requirements in an organisation
• Technical experts wishing to prepare for the Information Security Management System audit
• Expert advisors in information security management

Prerequisites

To attend the PECB ISO/IEC 27001 Lead Auditor training, participants should have a fundamental understanding of ISO/IEC 27001 and a comprehensive knowledge of audit principles​.

Exam format:

After attending the training course, you can take the exam. The exam type is unique because it is open-book and contains multiple-choice questions. The exam contains standalone questions and scenario-based questions, which aim to simulate real-life situations.The exam duration is 3 hours. The exam is taken on Day 5 in the morning. 

If you successfully pass it, you can apply for a “PECB Certified ISO/IEC 27001 Lead Auditor” credential, which demonstrates your ability and practical knowledge to implement an ISMS based on the requirements of ISO/IEC 27001.

In case you fail the exam, you can retake the exam within 12 months following the initial attempt for free.

The exam covers the following competency domains:

1. Fundamental principles and concepts of Information Security Management System (ISMS)
2. Information Security Management System (ISMS)
3. Fundamental audit concepts and principles
4. Preparation of an ISO/IEC 27001 audit
5. Conducting an ISO/IEC 27001 audit
6. Closing an ISO/IEC 27001 audit
7. Managing an ISO/IEC 27001 audit program