Information Security
ISO/IEC 27001 Lead Auditor
Learn to plan, conduct and close internal and external audits of an information security management system (ISMS) — in line with ISO 19011 and ISO/IEC 17021-1. Self-paced on myPECB, with 24/7 access.
Veloraa Training
COURSE INFORMATION
Your Learning, at a Glance
- Price
- 899 USD
999 USD - Category
- Information Security
- Duration
- Self-paced; suggested pace: 4–6 weeks at 6–8 hours per week
- Format
- Self-paced online eLearning via myPECB
- Certification
- PECB Certified ISO/IEC 27001 Lead Auditor (subject to passing the exam and meeting certification requirements)
Course Overview
The Credential for People Who Verify Information Security Management, Not Just Take It on Trust
ISO/IEC 27001 sets the requirements for an information security management system (ISMS) — the policies, risk management and controls that protect an organisation’s information. As more organisations certify against it, someone has to confirm it works in practice.
As a Lead Auditor, you manage an audit programme, lead an audit team, communicate with clients and resolve conflicts — then write findings that stand up. Veloraa delivers the official PECB curriculum online, with practical examples, exercises and quizzes so you can apply what you learn straight away.
The Most Certified Security Standard
ISO/IEC 27001 is the world’s leading standard for information security management.
Every ISMS Needs Audits
Internal and certification audits keep an ISMS credible.
Skilled Auditors Are in Demand
Organisations need auditors who understand security and audit practice.
Who Should Attend?
Anyone who will audit, lead or maintain an ISMS
No prior ISO/IEC 27001 certification or audit experience needed.
Learning Objectives
By the end of the course you will be able to:
- Master ISMS fundamentals - Explain the concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001.
- Interpret the requirements - Read ISO/IEC 27001 clause by clause from an auditor’s view.
- Apply audit principles - Use evidence-based and risk-based auditing, in line with ISO 19011.
- Plan the audit - Initiate the audit, run Stage 1 and build audit test plans.
- Conduct the audit - Run Stage 2 and test the requirements of ISO/IEC 27001 against real evidence.
- Lead the team - Lead an audit team, communicate with clients and resolve conflicts.
- Report and close - Draft nonconformity reports, review audit documentation and close the audit.
- Manage an audit programme - Evaluate action plans, plan surveillance and run an ISO/IEC 27001 audit programme.
Curriculum
5 Modules · 23 Lessons
Lessons follow the life of a real certification audit, from first contact to follow-up. Quizzes throughout.
Foundations of the ISMS5 Lessons
- 1. Course Objectives and Structure
- 2. Standards and Regulatory Frameworks
- 3. The Certification Process
- 4. Fundamental Concepts and Principles of Information Security
- 5. The Information Security Management System (ISMS)
You Will Be Able To Understand ISO/IEC 27001 and how certification works
Audit Principles4 Lessons
- 6. Fundamental Audit Concepts and Principles
- 7. The Impact of Trends and Technology in Auditing
- 8. Evidence-based Auditing
- 9. Risk-based Auditing
You Will Be Able To Apply the audit concepts every finding depends on
Preparing and Conducting the Audit7 Lessons
- 10. Initiating the Audit Process
- 11. Stage 1 Audit
- 12. Preparing for the Stage 2 Audit
- 13. Stage 2 Audit
- 14. Communication During the Audit
- 15. Audit Procedures
- 16. Creating Audit Test Plans
You Will Be Able To Initiate the audit, run Stage 1 and Stage 2, and gather evidence
Reporting and Closing3 Lessons
- 17. Drafting Audit Findings and Nonconformity Reports
- 18. Audit Documentation and Quality Review
- 19. Closing the Audit
You Will Be Able To Write findings, review audit documentation and close the audit
After the Audit4 Lessons
- 20. Evaluating Action Plans
- 21. Beyond the Initial Audit
- 22. Managing an Internal Audit Programme
- 23. Course Close and Exam Preparation
You Will Be Able To Evaluate action plans, plan surveillance and run an audit programme
Downloadable Resources: 450+ pages of course notes with examples, best practices, exercises and quizzes, in editable formats.
What’s Included
- 23 video lessons Expert-led, with quizzes
- 450+ pages of notes Examples, best practices, exercises & quizzes
- Exam voucher Plus one free retake in 12 months
- Certification fee No extra cost once you pass
- 31 CPD credits Attestation of completion
Frequently Asked Questions
Do I Need Audit Experience?
No. The course teaches audit principles from the ground up. Your work experience counts towards the higher credential levels once you pass the exam.
How Long Do I Have to Finish?
You get [ACCESS PERIOD] of unlimited access and study at your own pace. You can take the exam whenever you are ready.
Is the Exam Online?
Yes. You book it through PECB Exams and take it remotely.
What If I Fail the Exam?
You can retake it once for free within 12 months of your first attempt.
Lead Auditor or Lead Implementer — Which Should I Take?
Choose Lead Auditor if you will assess an ISMS, and Lead Implementer if you will build or run one. Many professionals take both, and holding both is a step towards PECB Master.
Can My Team Enrol Together?
Yes. Veloraa offers corporate and bespoke programmes. Use the enquiry form below for group pricing.
Exam & Certification
Your Path to Certification
The online exam covers seven competency domains. If you don’t pass first time, you can retake it once at no cost within 12 months.
- Complete the eLearning
23 lessons and quizzes · earn 31 CPD credits
- Pass the Exam
Book online at a time that suits you
- Apply for Your Credential
Choose the level that matches your experience
- Sign the Code of Ethics
Then receive your PECB certificate
- Maintain It
Annual maintenance and continuing education
Exam Domains
- Fundamental principles and concepts of an ISMS
- Information security management system (ISMS)
- Fundamental audit concepts and principles
- Preparing an ISO/IEC 27001 audit
- Conducting an ISO/IEC 27001 audit
- Closing an ISO/IEC 27001 audit
- Managing an ISO/IEC 27001 audit programme
Credential Levels
| Credential | Experience | Project Activities |
|---|---|---|
| Provisional Auditor | None | None |
| Auditor | 2 yrs (1 in information security) | 200 hours |
| Lead Auditor This Course | 5 yrs (2 in information security) | 300 hours |
| Senior Lead Auditor | 10 yrs (7 in information security) | 1,000 hours |
All levels require passing the ISO/IEC 27001 Lead Auditor exam (or equivalent) and signing the PECB Code of Ethics. Holders of both Lead Auditor and Lead Implementer who pass four additional Foundation exams qualify for PECB Master.
Happy Clients
