# ISO/IEC 27001 Lead Auditor (training course)

> Lead ISMS audits to certification-body standard.

URL: https://securei3.com/training/iso-27001-lead-auditor/
Level: Lead auditor
Duration: 5 days
Formats: Virtual instructor-led, In-house
Certificate: Certificate of achievement (on passing) or attendance from Secure iQube

## Who should attend

- Experienced internal auditors
- Aspiring certification auditors
- Supplier auditors

## Learning outcomes

- Lead first-, second- and third-party audits
- Manage an audit team
- Grade non-conformities consistently

## Overview

This five-day course develops the expertise to lead first-, second- and third-party audits of an information security management system against ISO/IEC 27001:2022. You learn to plan an audit programme, lead an audit team, gather and evaluate evidence, grade nonconformities and report findings, using the principles of ISO 19011 and the certification-body requirements of ISO/IEC 17021-1 and ISO/IEC 27006.

## Why attend

- Lead internal, supplier and certification-style audits
- Understand how certification bodies audit, so you can prepare your organisation
- Build a career path towards professional auditor certification
- Practise on a realistic multi-day audit case study

## Agenda

### Day 1: Introduction to the ISMS and ISO/IEC 27001
- Information security fundamentals
- ISO/IEC 27001:2022 requirements and Annex A
- Certification process and accreditation
- Auditor roles and ethics

### Day 2: Audit principles, preparation and launch
- Audit principles and evidence-based approach
- Risk-based auditing
- Stage 1 audit and document review
- Preparing the Stage 2 audit plan and checklists

### Day 3: On-site audit activities
- Communication during the audit
- Interviewing, observing and sampling
- Audit test plans for key controls
- Drafting findings and nonconformities

### Day 4: Closing the audit
- Audit conclusions and recommendations
- Closing meeting and audit report
- Follow-up of corrective actions
- Surveillance and recertification audits
- Managing an internal audit programme

### Day 5: Case study review and exam
- Case study debrief
- Exam preparation
- Written exam

Prerequisites: A good understanding of ISO/IEC 27001 and information security. We recommend at least two years of experience in IT, security, audit or compliance.
Assessment: Written exam and case study. Continuous assessment of the audit case study and a 2-hour written exam on day 5, closed book. Pass mark 70%. Participants who pass receive a certificate of achievement. Options for accredited personnel certification exams are available on request.
CPD hours: 35

Included:
- Course slides and participant notes
- Practical workbook with exercises and case studies
- Templates you can adapt for your organisation
- Certificate of completion
- 30 days of post-course Q&A support by email
- Refreshments and lunch for classroom sessions

## Frequently asked questions

### Will this make me a certified lead auditor?

You receive a Secure iQube certificate of achievement when you pass our exam. If you need an accredited personnel certification, ask us about exam options when you enquire.

### How are virtual sessions run?

Live, instructor-led sessions on Microsoft Teams or Zoom, with breakout rooms for exercises, the same materials as the classroom and short breaks every 90 minutes. You need a stable internet connection and a webcam.

### Can this course be run for our team only?

Yes. We deliver it privately, online or at your premises, and use examples from your own systems. In-house delivery is usually more cost-effective for six or more participants.

### How much does it cost?

Fees depend on format, location and group size. Send an enquiry and we will reply with dates and a quote within one working day.


Enquire: https://securei3.com/training/iso-27001-lead-auditor/#enquire