PECB CERTIFIED ISO/IEC 27001:2022 Lead Auditor
The target audience for training
- Auditors wishing to carry out and lead Information Security Management System (ISMS) certification audits
- Managers or consultants wishing to master the information security management system audit process
- Persons responsible for maintaining compliance with the requirements of the information security management system.
- Technical experts wishing to prepare for an information security management system audit.
- Expert consultants in information security management
What you will learn
Training " PECB Certified ISO/IEC 27001 Lead Auditor " is valuable and preferable to others in that it gives you the knowledge and skills you need to lead the audit of an information security management system (ISMS). The course also teaches you how to apply these skills in practice.
As well as explaining what ISO/IEC 27001 asks you to do, this course teaches you how to do it, through a variety of exercises, activities, case studies, stand-alone multiple-choice quizzes and scenario-based quizzes. These will enable you to test your knowledge of the stages in the audit process.
Once you have acquired the necessary expertise to carry out this audit, you can sit the examination and apply for the title of "PECB Certified ISO/IEC 27001 Lead Auditor. By holding a PECB Lead Auditor certificate, you will be able to demonstrate that you have the necessary skills and competencies to audit organisations in accordance with best practice.
Training programme
- Duration: 5 days
Day 1: Introduction to the Information Security Management System and the ISO/CEI 27001 standard
- Objectives and structure of the course
- Standards and regulations
- Certification process
- Fundamentals of the Information Security Management System
- Information security management system
Day 2: Principles, preparation and launch of the audit
- Leadership and approval of the WSIS project
- ISMS scope
- Information security policies
- Risk assessment
- Declaration of applicability and management decision to implement the ISMS
- Definition of the information security organisational structure
Day 3: On-site audit activities
- Stage 2 of the audit (second part)
- Communication during the audit
- Audit procedures
- Drafting audit test plans
- Drafting of audit findings and non-compliance reports
Day 4: Closing the audit
- Documentation de l’audit et revue de qualité de l’audit
- Closing the audit
- Evaluation of action plans by the auditor
- Benefits of the initial audit
- Managing an internal audit programme
- Competence and assessment of auditors
Day 5: Certification exam
Examination "PECB CERTIFIED ISO/IEC 27001 Lead Auditor meets the requirements of the PECB examination and certification programme. The examination covers the following areas of competence: Duration: 3 hours
- Area 1: Fundamental principles and concepts of an information security management system (ISMS)
- Area 2: Information security management system (ISMS)
- Area 3: Fundamental audit concepts and principles
- Area 4: Preparing for an ISO/IEC 27001 audit
- Area 5: Carrying out an ISO/IEC 27001 audit
- Area 6: Completion of an ISO/IEC 27001 audit
- Area 7: Managing an ISO/IEC 27001 audit programme
- Review of key ISMS concepts.
- Reminder of the objectives of the exam: structure, duration, format of questions.
- Presentation of the PECB certification process.
- Mock exam and revision quiz to put participants in a real-life situation.
- Advice on how to pass the exam.
- Passing the PECB ISO/IEC 27001 Lead Auditor certification exam.
- Attendance certificates are handed out and participants evaluate the course.
Trainer profile
Consultant-formateur et auditeur expert en management de la sécurité, alliant expertise technique, expérience terrain et savoir-faire pédagogique, dont les compétences techniques, professionnelles et pédagogiques ont été rigoureusement évaluées et validées dans le cadre de nos procédures internes de sélection.
Teaching methods and resources
The course is based on a balanced combination of theoretical and practical approaches, guaranteeing both the acquisition of knowledge and its operational application:
- Structured theoretical input, illustrated by practical examples tailored to the participants' professional context.
- Practical exercises at each stage to help you assimilate the knowledge you have acquired.
- A case study linking the different skill blocks.
- Strong interaction between trainers and trainees, making exchanges more concrete and in correlation with trainees' expectations.
- Full educational documentation, supplied in digital format.
- Course evaluation questionnaire at the end of the course, analysed by our teaching team.
- Certificate of acquired skills sent to the trainee at the end of the course.
- End-of-training certificate sent at the same time as the invoice to the company or funding organisation, confirming that the trainee has fully attended the session.
Training objectives
- Understanding how an Information Security Management System (ISMS) compliant with the ISO / IEC 27001 standard works
- Explain the correlation between ISO/IEC 27001 and ISO/IEC 27002, as well as with other standards and regulatory frameworks
- Understanding the role of an auditor: planning, leading and following up a management system audit in accordance with ISO 19011
- Managing an audit and an audit team
- Interpreting the requirements of ISO/IEC 27001 in the context of an ISMS audit
- Acquire the skills of an auditor with a view to: planning an audit, leading an audit, writing reports and following up an audit, in compliance with the ISO 19011 standard.
Assessment method
- Practical exercises at every stage of the course.
- A case study linking the different skill blocks.
- Quiz at the end of each day's training.
- Self-assessment of knowledge acquired by trainees via a questionnaire
Training prerequisites
To follow this ISO 27001 Lead Auditor course, you need to have a prior knowledge of the ISO 27001 standard and a thorough understanding of auditing principles.
Examination guide
Download the exam guide
- Language : French
- Level : Fundamental
- Certification body : 0
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days
Important information:
Our courses are not registered with the Répertoire National des Certifications Professionnelles (RNCP), but they do comply with the requirements of the Répertoire Spécifique (RS).