Cybersecurity certification
ISO/IEC 27001 Lead Auditor
Five days on auditing an information security management system to ISO/IEC 27001, following the audit principles of ISO 19011 and the certification-body requirements of ISO/IEC 17021-1. A different discipline from implementation, and usually a different person.
Duration
5 days
Languages
English, French
Delivery
Classroom, In-company, Live online, Self-paced
Exam
Included in the price
CPD credits
31 Continuing Professional Development credits
Accreditation
PECB
Courseware and examination in English. Sessions facilitated in English or French.
Who it is for
Internal auditors, assurance and second-line functions, and consultants who audit rather than implement.
Prerequisites
A fundamental understanding of ISO/IEC 27001 and of audit principles.
What you will be able to do
- 01Plan an audit programme and an individual audit against a defined scope.
- 02Gather and evaluate evidence rather than accept assertion.
- 03Write findings that stand up when they are contested.
- 04Distinguish a nonconformity from an observation, and major from minor.
- 05Manage an audit team and the closing meeting.
- 06Follow up corrective action to closure.
What is covered
Audit principles and frameworks
ISO 19011, ISO/IEC 17021-1 and the audit's purpose.
Preparing the audit
Programme, plan, checklists and document review.
Conducting the audit
Evidence, sampling, interviews and observation.
Findings and reporting
Classification, writing and defending them.
Closing and follow-up
Corrective action and verification.
Exam
Sat at the end of the course and included in the price.
The exam and the certificate
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB’s published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.
The same examination leads to a graded credential, from Provisional through to Senior, and the grade you receive depends on your documented professional experience and project involvement, not on your exam mark. We tell candidates before they book which grade their experience currently supports.
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB's published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.Price
€2,350–2,850 per seat
All prices exclude VAT. Classroom sessions held in the Netherlands are subject to 21% Dutch VAT for all attendees, regardless of the attendee's country — EU rules tax admission to an educational event where the event takes place. Online and in-company delivery to businesses elsewhere in the EU is reverse-charged.
GSNA Solutions is a PECB Certified Partner and authorised reseller. PECB personnel certifications are issued under ISO/IEC 17024. Course participants who complete a certificate programme hold a certificate; they are not thereby certified, licensed, accredited or registered to practise an occupation. Certification follows successful examination and verification of professional experience against PECB's published requirements.
Other courses on this track
2 days
ISO/IEC 27001 Foundation
The two-day entry point to ISO/IEC 27001. It gives you the vocabulary, the structure of the standard and a working understanding of what an information security management system actually is, which is what most people are missing when they are asked to contribute to one.
5 days
ISO/IEC 27001 Lead Implementer
Five days on implementing an information security management system end to end, using PECB's implementation methodology. It is the course to take if certification is a commitment rather than an ambition, and it is our highest-volume track.
Leave with your top three risks documented
Thirty minutes with a senior practitioner. No slideware, no sales engineer.