PECB CourseInformation SecurityAdvancedISO/IEC 27001ISO/IEC 27001 Lead Auditor
Develop the competence to audit an ISMS and manage audit teams by applying widely recognized audit principles, procedures, and techniques per ISO 19011.
Course Description
The ISO/IEC 27001 Lead Auditor training course enables you to develop the competence to audit an Information Security Management System (ISMS) and manage a team of auditors by applying widely recognized audit principles, procedures, and techniques. During this training course, you will acquire the knowledge and skills to proficiently plan and perform internal and external audits in compliance with ISO 19011 and the ISO/IEC 17021-1 certification process. Based on practical exercises, you will master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution. The training materials contain over 450 pages of explanatory information, practical examples, and exercises. After attending this training course, you can sit for the exam and apply for the PECB Certified ISO/IEC 27001 Lead Auditor credential, demonstrating your ability to audit organizations based on best practices.
Who Should Attend
- Auditors seeking to perform and lead ISMS certification audits
- Managers or consultants seeking to master the ISMS audit process
- Individuals responsible for maintaining conformity with ISMS requirements
- Technical experts seeking to prepare for an ISMS audit
- Expert advisors in information security management
Learning Objectives
- 1Understand the operation of an ISMS based on ISO/IEC 27001
- 2Acknowledge the correlation between ISO/IEC 27001 and ISO/IEC 27002, as well as with other standards and frameworks
- 3Understand the role of an auditor in planning, leading, and following up on an ISMS audit in accordance with ISO 19011
- 4Learn how to lead an audit and audit team
- 5Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
- 6Acquire the competence of an auditor to plan an audit, lead an audit, draft reports, and follow up on an audit in compliance with ISO 19011
Prerequisites
- A fundamental understanding of ISO/IEC 27001 and ISO/IEC 27002
- Knowledge of audit principles and techniques (ISO 19011 recommended)
Course Modules
Day 1: Introduction to the ISMS and ISO/IEC 27001
Normative, regulatory, and legal framework related to information security; fundamental principles of information security; ISO/IEC 27001 certification process; ISMS detailed presentation; and information security risk management overview.
Day 2: Audit Principles, Preparation, and Initiation
Fundamental audit concepts and principles; audit approach based on evidence and risk; preparation of an ISO/IEC 27001 certification audit; document review, audit plan, and conducting an opening meeting.
Day 3: On-Site Audit Activities
Communication during the audit; audit procedures: observation, document review, interview, sampling techniques, technical verification, and corroboration; drafting audit findings and documenting nonconformities.
Day 4: Closing the Audit and Follow-Up
Drafting audit conclusions and recommendations; closing meeting; evaluating corrective action plans; ISMS surveillance audit and management of an audit program.
Day 5: Certification Exam
Review of key concepts and exam preparation. The PECB Certified ISO/IEC 27001 Lead Auditor exam covers Domain 1: Fundamental principles and concepts of an ISMS; Domain 2: ISMS based on ISO/IEC 27001; Domain 3: Fundamental audit concepts and principles; Domain 4: Preparation of an ISO/IEC 27001 audit; Domain 5: Conducting an ISO/IEC 27001 audit; Domain 6: Closing an ISO/IEC 27001 audit; Domain 7: Managing an ISO/IEC 27001 audit program.
Exam Details
Duration
3 hours
Format
Multiple choice (80 questions), open book
Passing Score
70%
Retake Policy
Free retake within 12 months after first failure
Available in:
Certification
PECB Certified ISO/IEC 27001 Lead Auditor
Issued by PECB
Digital Badge & Verification
Verified via Credly
Upon passing the exam, your certificate will be issued as a digital badge via Credly. This badge can be shared on LinkedIn, embedded in your email signature, and verified by anyone at any time.
Share this course
Related Courses
Continue your learning journey with these related courses.
ISO/IEC 27001 Foundation
Information Security
Learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001.
ISO/IEC 27001 Lead Implementer
Information Security
Lead the implementation of ISO/IEC 27001:2022 ISMS with expert knowledge in planning, risk assessment, control implementation, and certification audit preparation.
ISO/IEC 27001 Transition
Information Security
Update your ISO/IEC 27001 knowledge to the 2022 edition and learn to transition existing ISMS implementations.