ISO 27001 Lead Auditor

It is structured around seven competency domains: fundamental principles and concepts of an ISMS; the ISMS itself; fundamental audit concepts and principles; preparation of an ISO/IEC 27001 audit; conducting the audit; closing the audit; and managing an ISO/IEC 27001 audit programme. Questions test both ISO/IEC 27001 requirements and the audit process as described in ISO 19011 and ISO/IEC 17021-1.

PECB publishes three exam types: multiple-choice closed-book, essay-type open-book, and multiple-choice open-book. PECB states that essay-type exams will be gradually transitioning to multiple-choice open-book exams. Because the exam page points candidates to the List of PECB Exams for the specific type, language options and other details, confirm the current format there before you book.

For essay-type exams, results arrive by email and the window runs from three to eight weeks after the exam date; only pass or fail is reported, with no specific grade. For multiple-choice exams, candidates see their exact grade instantly on submission and are also informed by email whether they passed.

There is no limit on retakes, but after a first attempt you must wait 15 days from the initial exam date before the first retake. Candidates who completed the training course with a PECB Partner and failed the first attempt may retake free of charge within 12 months of course completion; otherwise retake fees apply. Failing candidates also receive a list of the domains where they performed poorly.

For paper-based exams, additional time can be provided if requested on the day of the exam: 10 additional minutes for Foundation exams, 20 for Manager exams and 30 additional minutes for Lead exams. Plan to arrive at least 30 minutes before the start, since late arrivals are not given extra time to compensate and may not be allowed to sit.

Follow the course sequence: ISMS concepts and ISO/IEC 27001 clauses first, then audit principles and audit preparation, then on-site audit activities, then audit closure, and finally audit programme management. The five-day agenda maps directly onto the domain structure, so a candidate weak in a later domain usually has a gap in an earlier one. Use practice tests to find those gaps.

The course assumes a fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles. The Lead Auditor credential itself requires passing the exam, five years of professional experience with two years of work experience in information security management, audit activities totalling 300 hours, and signing the PECB Code of Ethics. Lower-activity credentials such as Auditor and Provisional Auditor also exist.

PECB highly recommends that at least 48 hours before the online exam date you access the PECB Online Examinee Guide and check the technical requirements. You must bring a valid identity card to show the invigilator, and secondary devices such as tablets and phones are not allowed during the exam. Sessions are supervised remotely by an invigilator via camera.

Yes. Candidates who disagree may request a re-evaluation by writing to [email protected] within 30 days of receiving the results; later requests are not processed. If still dissatisfied, there are 30 further days from receipt of the re-evaluation result to file an appeal through the PECB Ticketing System. For multiple-choice exams, the 30-day window to appeal runs from receipt of results.