ISO/IEC 27001 Lead Auditor is the course for the person who assesses an information security management system (ISMS). Over five days it covers the audit cycle from start to finish: planning the audit, leading the team, collecting and evaluating evidence, writing nonconformities and reporting conclusions, following ISO 19011 and ISO/IEC 17021-1.
Choose it if you audit for a certification body, run internal audits, or need to prepare your organization for a third-party audit. If your job is to build or run the ISMS, take Lead Implementer instead.
This training course provides the knowledge and skills necessary to plan and conduct internal and external audits in accordance with ISO 19011 guidelines and the ISO/IEC 17021-1 certification process.
Through practical exercises, participants will master audit techniques and develop the competence to manage an audit program and audit team, including handling client communication and conflict resolution.
Upon acquiring the requisite expertise, participants are eligible to take the certification examination. Successful candidates may apply for the “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Holding this PECB Lead Auditor Certificate demonstrates the holder’s capabilities and competencies in auditing organizations against best practices.
Upon completing this training course, participants will be able to:
A fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.
The ISO/IEC 27001 Lead Auditor training course is pivotal for those seeking to establish and maintain digital trust by ensuring the effectiveness of ISMS. By mastering the principles and techniques of ISMS auditing, attendees will play a crucial role in identifying vulnerabilities, enhancing security measures, and fostering a culture of accountability. Participants who complete the training course will be equipped to lead audits that not only ensure regulatory compliance but also foster confidence in the organization’s ability to secure its digital assets.
Live classes for this course are led by Islam Elzayat, a PECB Certified Trainer with more than 17 years of experience in IT governance, cybersecurity GRC, IT audit and IT service management, including more than 500 third-party audit days. Full profile and verified badges.
Live classes are held online. Class hours are arranged with the participants to suit their time zones. The e-learning and hybrid options start as soon as your course is assigned.
The course covers five days of content, with the certification exam on the fifth day, and carries 31 CPD credits. In the e-learning format you cover the same material at your own pace.
Yes. The course fee includes the PECB certification and examination fees. If you do not pass, one complimentary retake is available within 12 months of your first attempt.
You need a fundamental understanding of ISO/IEC 27001 and a comprehensive knowledge of audit principles.
It is available as e-learning (English, French), hybrid learning (English) and live online class (English). Choose the format and language before adding the course to your cart.
Hybrid learning combines the self-paced course with one day of one-to-one live coaching with the instructor. The day can be split into a half day before you start studying and a half day before your exam, so you go in prepared.
The next live classes start on Thursday, 15 October 2026, 9:00 am and on Thursday, 27 May 2027, 9:00 am. They are held online and led by Islam Elzayat. Class hours are arranged with the participants to suit their time zones. Select “Live Event” and your date before adding the course to your cart.
PECB issues the certificate. After passing the exam you can apply for the “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Horus Academy is a PECB Authorized Silver Partner and does not issue the certificate itself.
The “PECB Certified ISO/IEC 27001 Lead Auditor” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of Information Security Management System (ISMS)
Domain 2: Information Security Management System (ISMS)
Domain 3: Fundamental audit concepts and principles
Domain 4: Preparation of an ISO/IEC 27001 audit
Domain 5: Conducting an ISO/IEC 27001 audit
Domain 6: Closing an ISO/IEC 27001 audit
Domain 7: Managing an ISO/IEC 27001 audit program
Upon successfully passing the examination, you may apply for the relevant credential as detailed in the program overview. The official certificate will be issued after you have fulfilled all requirements associated with your selected credential.
For comprehensive information regarding the ISO/IEC 27001 certification scheme and the PECB certification process, please consult the official program documentation.
The requirements for PECB Auditor Certifications are:
| Credential | Exam | Professional experience | MS audit/assessment experience | Other requirements |
|---|---|---|---|---|
| PECB Certified ISO/IEC 27001 Provisional Auditor | PECB Certified ISO/IEC 27001 Lead Auditor exam or equivalent | None | None | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Auditor | PECB Certified ISO/IEC 27001 Lead Auditor exam or equivalent | Two years: One year of work experience in Information Security Management | Audit activities: a total of 200 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Lead Auditor | PECB Certified ISO/IEC 27001 Lead Auditor exam or equivalent | Five years: Two years of work experience in Information Security Management | Audit activities: a total of 300 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27001 Senior Lead Auditor | PECB Certified ISO/IEC 27001 Lead Auditor exam or equivalent | Ten years: Seven years of work experience in Information Security Management | Audit activities: a total of 1,000 hours | Signing the PECB Code of Ethics |
Note: PECB Certified Individuals who do possess the Lead Implementer and Lead Auditor Credentials are qualified for the respective PECB Master Credential, given they have taken 4 additional Foundation Exams which are related to this scheme. For more detailed information about the Foundation Exams and the overall Master Requirements, please go to the following link: https://pecb.com/master-credentials.
To be considered valid, these audits should follow best audit practices and include the following activities:
Course agenda
Day 1: Introduction to the information security management system (ISMS) and ISO/IEC 27001
Day 2: Audit principles, preparation, and initiation of an audit
Day 3: On-site audit activities
Day 4: Closing the audit
Day 5: Certification Exam
