Course benefits:

Improve your knowledge of auditing techniques

Learn how to lead audit teams

Add new skills to your resume and expand your business
This ISO 27001 Lead Auditor online training is accredited by ASIC and allows you to become a certified lead auditor for ISO 27001. The course was created to help you start working for certification bodies or expand your consulting business.
After passing the exam, you will receive an ISO 27001 Lead Auditor certificate accredited by ASIC, which proves your ability to perform certification audits and lead audit teams. The ISO 27001 Lead Auditor course is divided into three parts:

A video library: lessons and practical information about the standard and how to prepare for the audit, lead the ISO 27001 audit team, perform the audit, and prepare the final audit report.

An interactive workshop: helps you practice the concepts necessary for auditing the standard guided by an Advisera top expert.

ISO 27001 Lead Auditor certification exam: upon successful completion of the exam, you will get a certificate and a badge for your LinkedIn profile to highlight your qualifications.

Who should attend:

Novice consultants/auditors seeking to learn new expertise and perform ISMS certification audits

Experienced consultants/auditors needing proof of their competence as ISO 27001 lead auditors

Chief Information Security Officers needing to prepare for an ISMS audit

Prerequisites:

There are no prerequisites to attend the ISO 27001 Lead Auditor course.
Introduction

Introduction to the course

Module 1 - Introduction to ISO 27001

Introduction & suggested reading

What is ISO 27001?

The structure of ISO 27001

Information security principles

Introduction to the Information Security Management System

Implementing ISO 27001 requirements

Implementing ISO 27001 as a project

Documenting ISO 27001 requirements

ISO 27001 Benefits

ISO 27001 Benefits – Real-life exercise

Related documentation

Certification FAQs

Recap quiz

Module 2 - The planning phase

Introduction & suggested reading

Understanding your organization and its context [clause 4.1]

Understanding the needs and expectations of interested parties [clause 4.2]

Determining the scope of the ISMS [clause 4.3]

Leadership and commitment [clause 5.1]

Information Security Policy [clause 5.2]

Organizational roles, responsibilities and authorities [clause 5.3]

Information security objectives [clause 6.2]

Resources [clause 7.1]

Competence [clause 7.2]

Awareness [clause 7.3]

Communication [clause 7.4]

Documented information [clause 7.5]

Related documentation

Recap quiz

Module 3 - Risk management

Introduction & suggested reading

Addressing risks and opportunities [clause 6.1.1]

Risk management process [clause 6.1.2]

Information security risk assessment – Risk identification [clause 6.1.2]

Exercise: Information security risk assessment – Risk identification

Information security risk assessment – Risk analysis and evaluation [clause 6.1.2]

Information security risk treatment [clause 6.1.3]

Statement of Applicability [clause 6.1.3]

Risk treatment plan [clause 6.1.3]

Related documentation

Recap quiz

Module 4 - The Do phase

Introduction & suggested reading

Formulating the risk treatment plan [clause 6.1.3]

Implementing the risk treatment plan [clause 8.3]

Operational planning and control [clause 8.1]

Operating the ISMS [clause 8]

Managing outsourcing of operations [clause 8.1]

Controlling changes [clause 8.1]

Risk assessment review [clause 8.2]

Related documentation

Recap quiz

Module 5 - The Check and Act phases

Introduction & suggested reading

Monitoring, measurement, analysis, and evaluation [clause 9.1]

Internal audit [clause 9.2]

Management review [clause 9.3]

Nonconformities and corrective actions [clause 10.2]

Continual improvement [clause 10.1]

Related documentation

Recap quiz

Module 6 - Overview of Annex A

Introduction & suggested reading

Introduction to Annex A

People controls

Physical controls

Technological controls – overview and new controls

Technological controls – software development

Technological controls – operational security

Organizational controls – policies and responsibilities

Organizational controls – information and asset management

Organizational controls – operational security

Organizational controls – supplier security

Organizational controls – incidents and business continuity

Organizational controls – compliance, privacy, and legal aspects of security

Related documentation

Recap quiz

Module 7 - Auditing basics

Introduction & suggested reading

Auditor assumptions

Techniques for finding evidence

Sampling the records

Interviewing techniques

The audit findings

Nonconformities

Observations

Internal vs. external audit

Annual audit program

Audit plan for an individual audit

Creation of the checklist

Internal audit report

Corrective action follow-up

Recording the evidence

Recap quiz

Module 8 - Understanding auditing standards

Introduction & suggested reading

What is certification?

Certification process

Certification of integrated management systems

Introduction to accreditation and ISO 17021

Competences of lead auditors required by ISO 17021-1

Introduction to International Accreditation Forum (IAF) documents

Introduction to ISO 19011

Principles of auditing

Recap quiz

Module 9 - Understanding audit roles and responsibilities

Introduction & suggested reading

Audit Team Leader / Lead Auditor

Auditor

Technical Specialist

Certification Reviewer

Audit Client

Management Team

Auditee

Hosts / Guides

Recap quiz

Module 10 - Planning the audits

Introduction & suggested reading

Audit criteria and objectives

Audit scope

Selecting audit methods

Sampling evidence in audits

Types of remote auditing techniques

Deciding when to use remote auditing techniques

Planning the use of remote auditing techniques

Selecting the audit team

Managing audit risks

Preparing the audit plan

Allocating audit activities to auditors

Making contact with the audit client

Preparation of audit resources

Recap quiz

Module 11 - Managing the audit process

Introduction & suggested reading

Opening meeting

Managing site visits

Interviews

Audit evidence requests

Debriefing sessions

Dealing with conflicts

Related documentation

Recap quiz

Module 12 - Managing your audit team

Introduction & suggested reading

The importance of managing your audit team

Communication with the team before the audit

Managing audit progress

Team meetings

Managing audit findings

Managing audit records

What to do when you hit problems

Evaluating your audit management

Recap quiz

Module 13 - Completing a successful audit

Introduction & suggested reading

Audit findings

How to reach audit conclusions

Planning the closing meeting

Holding an effective closing meeting

Dealing with feedback at closing meetings

Effective audit report writing

Post-audit activities, corrections, and correction actions

Certification review process

Related documentation

Recap quiz

Instructions for taking the exam and obtaining the certificate
Advisera’s courses are accredited by ASIC

ASIC is one of the world's largest international accreditation agencies for schools, colleges, universities, and online learning providers. Based in the UK, this government-approved quality assurance body is recognized globally, with more than 400 providers accredited in over 65 countries.

Why Advisera chose ASIC

Advisera chose ASIC accreditation because it is focused primarily on leading universities and online training organizations. When compared to other accreditation bodies, it has the largest portfolio of higher education organizations, as well as distance education providers.
About the ISO 27001 Lead Auditor course

How do I purchase exams for several people?

We have prepared a discount if you purchase certificates for more than one student at once. Do not hesitate to contact us at sales@advisera.com to find out the prices.

Are the ISO 27001 Lead Auditor course and certificate accredited?

Yes, both the course and the certificate are accredited by ASIC, an internationally renowned quality standard for schools, colleges, universities, and online learning providers. This accreditation provides additional credibility for the quality of Advisera’s courses and ensures that the certificate is globally recognized.

What is the deadline for attending the video lectures?

There is no time limit, so you can take as long as you need to watch the video lectures. We do, however, recommend that you watch them all within three to four weeks so that you get the most benefit from them.

What is needed to access the ISO 27001 Lead Auditor online training?

All you need to access the course is your PC, Mac, or mobile device; any major browser (Chrome, Firefox, Internet Explorer, Safari, etc.); and a broadband Internet connection. And, of course, plenty of available time to devote to the course.

What do I need to know before attending the course?

You don’t need any prior knowledge or experience in the implementation – this course was designed so that a beginner to these topics will understand it.

How do I participate in the workshop?

To participate in the online workshop, we will send you a special link to connect to the Zoom. All you need is a computer with a microphone, speakers, and web camera. We recommend that you have the web camera on during the workshop for an enhanced learning experience.

Are there prerequisites for attending the workshop?

Completion of all of the video lessons is the only prerequisite.

How do I get certified as an ISO 27001 lead auditor?

It's simple:

Watch complete videos of all lessons, and answer all practice exams.

Attend the workshop.

Pass the online exam.

When will I receive the certificate for the course?

After watching all of the video lessons and completing the workshop, you may take the ISO 27001 Lead Auditor certification exam. If you earn a passing score, you will be issued the certificate. Please note that during the exam, an online proctoring service will verify your identity and ensure that you take the exam without assistance. Click here to learn more about our online proctoring service.

About the ISO 27001 Lead Auditor exam

What does it take to pass the exam and earn the certificate?

The ISO 27001 Lead Auditor course materials (video lectures, quizzes, reading materials, practice exams, and other resources), along with the skills you learn from the workshop, are all you need to successfully pass the certification exam and receive your certificate.

How many questions are on the exam?

There are a total of 78 questions on the exam; some of them are True/False questions, while the others are multiple choice questions, and all correctly answered questions are worth 1 mark.

How much time is allowed for the exam?

The time allowed to answer all the questions on the ISO 27001 Lead Auditor exam is 120 minutes. However, please reserve an additional 15 minutes of your time for a system checkup before you start the exam session.

In which language is the exam?

The exam is in English.

Where will I take the examination?

The certification exam can be taken online, from anywhere. To make this possible, we employ an online proctoring service. Click here to learn more.

You will receive a temporary certificate valid until final payment is due. The final certificate will be delivered upon full payment.

Course Instructors

ISO 27001 Lead Auditor Course - Advisera

Dejan Kosutic

CEO & Lead Expert for ISO 27001 & ISO 22301

Leading expert on cybersecurity/information security and author of several books, articles, webinars, and courses. As a premier expert, Dejan founded Advisera to help small and medium businesses obtain the resources they need to become certified against ISO 27001 and other ISO standards. He believes that making ISO standards easy to understand and simple to use creates a competitive advantage for Advisera's clients.

Carlos Pereira Da Cruz

ISO Consultant, Trainer, and Auditor

Carlos Pereira da Cruz has more than 30 years of experience working as a consultant, trainer, and auditor with ISO 9001 and ISO 14001. He is a university teacher and author of several books on strategic management, ISO 9001, and ISO 14001.

Garry Cornell

ISO Consultant, Trainer, and Auditor

Garry Cornell has more than 25 years of global experience as a senior manager, certification auditor, and consultant, helping a wide range of businesses in their implementations of ISO 14001, ISO 45001, and ISO 50001. He has developed various courses and is the author of several books on auditing techniques and ISO 14001. He is a member of the Institute of Environmental Management and Assessment.

Conformio

ISO 27001 Documentation Toolkits

ISO 27001 Training

By Type

Where to Start

NewAI Tool

Other

Dejan Kosutic

ISO 27001 Lead Auditor Course

Introduction

Module 1 - Introduction to ISO 27001

Module 2 - The planning phase

Module 3 - Risk management

Module 4 - The Do phase

Module 5 - The Check and Act phases

Module 6 - Overview of Annex A

Module 7 - Auditing basics

Module 8 - Understanding auditing standards

Module 9 - Understanding audit roles and responsibilities

Module 10 - Planning the audits

Module 11 - Managing the audit process

Module 12 - Managing your audit team

Module 13 - Completing a successful audit

Advisera’s courses are accredited by ASIC

Why Advisera chose ASIC

How do I purchase exams for several people?

Are the ISO 27001 Lead Auditor course and certificate accredited?

What is the deadline for attending the video lectures?

What is needed to access the ISO 27001 Lead Auditor online training?

What do I need to know before attending the course?

How do I participate in the workshop?

Are there prerequisites for attending the workshop?

How do I get certified as an ISO 27001 lead auditor?

When will I receive the certificate for the course?

What does it take to pass the exam and earn the certificate?

How many questions are on the exam?

How much time is allowed for the exam?

In which language is the exam?

Where will I take the examination?

Online course

Workshop and certificate

Select the date

Course Instructors

Dejan Kosutic

Carlos Pereira Da Cruz

Garry Cornell

Why Advisera ISO 27001 Lead Auditor Course?

Free unlimited access to the entire course

Globally recognized accreditation by ASIC

Expert AI assistant available during the course

9,000 students have attended this course already

Related Trainings

ISO 27001 Lead Implementer

ISO 9001 Lead Auditor

ISO 9001 Internal Auditor

Get in Touch

Products

Resources

Standards & Regulations

Advisera

Help