PECB ISO 28000 Lead Auditor
PECB Certified ISO 28000 Lead Auditor
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified ISO 28000 Lead Auditor credential is issued by PECB to candidates who pass the associated certification exam and then meet the professional experience requirements for the credential level they apply for. The training course behind it builds the competencies needed to perform security management system (SeMS) audits by applying recognized audit principles, procedures and techniques, integrating ISO/IEC 17021-1 requirements, ISO 19011 guidelines and other audit best practices. It is aimed at auditors who want to perform and lead SeMS audits, people responsible for maintaining conformity to ISO 28000, technical experts preparing for an SeMS audit, professionals pursuing a career in management systems conformity assessment, security management consultants, regulators, and management representatives who want to master the SeMS audit process. The exam covers seven competency domains: fundamental principles and concepts of a security management system; security management system requirements; fundamental audit concepts and principles; preparing, conducting and closing an ISO 28000 audit; and managing an ISO 28000 audit program. The course runs five days, with the certification exam on Day 5, and uses a participant-centered approach with practical exercises based on scenarios inspired by real-life events plus quizzes of stand-alone and scenario-based questions. Participants should already have a basic understanding of ISO 28000 and audit principles. Training material exceeds 450 pages, and attendees receive an attestation worth 31 CPD credits.
What you'll study
About PECB ISO 28000 Lead Auditor preparation
What is the exam format?
PECB describes the exam as fully meeting the requirements of its Examination and Certification Program, covering the seven competency domains listed for the course. The preparatory quizzes in the training are stand-alone and scenario-based questions. For the exam type, available languages and other specifics, PECB directs candidates to its List of PECB Exams and the Examination Rules and Policies.
How long is the exam and what is the passing score?
The source page does not state the number of questions, the duration, or the passing score. These details sit in the List of PECB Exams and the Examination Rules and Policies, which PECB links from the course page. Confirm them there before you book, rather than relying on figures from older course versions.
What happens if I fail?
You can retake the exam once for free within 12 months following your initial exam date. Use the first attempt diagnostically: note which of the seven domains the weak questions came from, then rebuild your study plan around those domains before scheduling the retake.
When is the exam taken during the course?
The course agenda runs five days: Day 1 covers the SeMS and ISO 28000, Day 2 audit principles and audit preparation and initiation, Day 3 on-site audit activities, Day 4 closing the audit, and Day 5 is the certification exam. Plan your revision so the earlier days' material stays fresh.
Do I need experience before sitting the exam?
No. The exam is open, and the Provisional Auditor credential requires the exam or equivalent, no professional experience and no audit experience, plus signing the PECB Code of Ethics. Experience only matters when you apply for higher credentials such as Auditor, Lead Auditor or Senior Lead Auditor.
How much audit experience does the Lead Auditor credential need?
The PECB Certified ISO 28000 Lead Auditor credential requires five years of work experience, including two years in Supply Chain Security Management, and a total of 300 hours of audit activities, plus signing the PECB Code of Ethics. The Senior Lead Auditor level raises this to ten years, seven in Supply Chain Security Management, and 1,000 audit hours.
What counts as valid audit activity?
PECB says audit activities must follow best audit practices and include planning an audit, managing an audit program, drafting audit reports, drafting nonconformity reports, drafting audit working documents, reviewing documented information, conducting an on-site audit, following up on nonconformities, and leading an audit team. Keep a log mapped to these categories.
In what order should I study?
Follow the course sequence: SeMS concepts and ISO 28000 first, then audit principles and audit preparation, then on-site activities, then audit closing, and finally audit program management. Domains 1 and 2 underpin everything later, so do not skip them to spend more time on audit mechanics.
What are common failure modes?
Candidates typically lose marks by confusing ISO 28000 requirement interpretation with generic security advice, misapplying audit principles, and muddling the stages of preparing, conducting and closing an audit. Scenario questions punish those who memorize definitions without practising how evidence is collected, verified and turned into a nonconformity report.
Are exam and certification fees separate from the course?
PECB states that certification and examination fees are included in the price of the training course. The source does not publish a standalone exam fee, so if you are sitting the exam outside a course, check the current fee with PECB support rather than assuming one.