We provide virtual course about ISO/IEC 27001 Lead Auditor. ISO/IEC 27001 Lead Auditor is a comprehensive training course designed for professionals who want to develop the knowledge and skills necessary to audit an Information Security Management System (ISMS) against the ISO/IEC 27001 standard.
Course description:
The course covers the audit lifecycle, techniques, reporting requirements and how to lead audit teams within a structured audit framework. This course provides a deep dive into auditing practices tailored to ISO/IEC 27001. Participants learn how to plan, conduct, report and follow up on internal and external audits of an ISMS.
The course blends theoretical insights with practical exercises so delegates can apply audit concepts, techniques and principles in real-world contexts. It also prepares participants for the Lead Auditor certification exam and helps build competence in professional audit roles.
Course objectives:
Upon completion of this course, participants will be able to:
• Understand audit principles, processes and methods according to ISO/IEC 27001
• Plan and prepare information security audits that align with standard requirements
• Conduct audits, evaluate conformity and communicate findings effectively
• Manage audit teams and handle audit reporting and follow-up
• Apply audit tools and techniques in organisational contexts
• Prepare for and sit the ISO/IEC 27001 Lead Auditor certification exam
Course outline:
Day 1 - Introduction to auditing principles and the ISO/IEC 27001 standard:
• The course begins with an overview of audit principles, including the purpose of ISMS audits and how these relate to organisational goals. Participants also review the structure and requirements of ISO/IEC 27001 as a basis for audit activities.
Day 2 - Audit planning and preparation:
• This section focuses on how to plan and prepare for an ISMS audit. Participants learn how to define audit objectives and scope, select audit criteria, and develop audit plans that reflect organisational risk and compliance needs. Techniques for gathering audit evidence are introduced.
Day 3 - On-site audit activities:
• Participants practice audit execution, including interviewing, evidence collection, observation and evaluation. The course emphasises professional conduct, ethics and objectivity throughout the audit process.
Day 4 - Closing the audit:
• This module covers how to compile audit findings, communicate effectively with stakeholders, and draft audit reports that are clear, concise and aligned with ISO/IEC 27001 expectations. Participants also learn how to handle nonconformities and support organisational improvement.
Day 5 - Preparation for exam:
• The final content area focuses on audit follow-up activities, including corrective action tracking, evaluation of effectiveness and how audit results support continual improvement of an ISMS. Preparation for the certification exam is integrated throughout this phase.
Target audience:
This course is designed for internal and external auditors, compliance professionals, risk managers, consultants and others who are responsible for auditing, assessing or evaluating information security practices and controls.
Prerequisites:
• Participants should have a foundational understanding of ISO/IEC 27001, either through prior training (e.g., Foundation) or equivalent experience with information security management systems.
Language:
• English course material, norwegian or english speaking instructor
Certification:
For Virtual courses we will send out a voucher that gives you access to an online exam. This can be booked and taken home monitored by a proctor via camera. More information about the exam rules will be send from PECB.