
Gain the expertise and credentials to lead ISO 27001:2022 audits with confidence.
This certified five-day ISO 27001 Lead Auditor course gives you the practical skills to plan, conduct and report on ISMS audits in line with ISO 19011:2018 and ISO 17021:2015. You’ll learn the full audit process used by certification bodies, so you can:
Delivered by experienced lead auditors, this course is accredited by IBITGQ and awards the Certified ISO 27001:2022 ISMS Lead Auditor qualification.
Ways to learn
Develop the skills and confidence to lead ISO 27001:2022 information security management system (ISMS) audits from start to finish.
Guided by expert instructors with years of hands-on auditing experience, you’ll follow ISO 19011:2018 best-practice principles and learn how certification bodies apply ISO 17021:2015 requirements.
You will learn how to:
By the end of the course, you’ll be ready to lead audits that stand up to scrutiny and add measurable value to your organisation or clients.
This course is ideal for professionals who want to lead ISO 27001 audits or play a key role in their organization’s certification and compliance program, including:
You will need a laptop for the duration of your course and exam.
Full details on how to access the exam will be provided by email 1–2 days before sitting the exam.
Live Online PDT/PST
Live Online CDT/CST
Live Online EDT/EST
Learn from anywhere with our instructor-led Live Online course.
There are no formal entry requirements for this course, but you should have good knowledge of ISO 27001. This could be obtained through practical experience, reading, or attending the Certified ISO 27001:2022 ISMS Foundation or Certified ISO 27001:2022 ISMS Lead Implementer training courses.
Attendees will need to have their own copies of the ISO/IEC 27001:2022 and ISO 27002:2022 standards for use during the course.
We strongly recommend purchasing and reading the following standards before attending the course:
We also recommend purchasing and reading the following textbook:
Candidates take the Certified ISO 27001:2022 ISMS Lead Auditor (CIS LA) exam set by IBITGQ (International Board for IT Governance Qualifications). There is no extra charge for this exam.
This course is equivalent to:
35
CPD points
Successfully completing the course and exam awards the Certified ISO 27001:2022 ISMS Lead Auditor (CIS LA) qualification.
This course holds accreditation from IBITGQ (International Board for IT Governance Qualifications) and CIISec (The Chartered Institute of Information Security), satisfying CIISec Knowledge Areas requirements at Level 1: A1, A3, A7, C1, C2, D2, E3, F2, H1, and H2; and at Level 1+: A2, A4, A5, A6, B1, B2, D1, E1, E2, F1, and G1.
As a premier personnel certification body, IBITGQ specializes in certifying individuals who demonstrate exceptional proficiency in IT governance practices.
IBITGQ maintains accreditation to the ISO/IEC 17024:2012 standard, a globally recognized benchmark for conformity assessment. Accreditation by the IAS (International Accreditation Service) further underscores the course’s commitment to meeting stringent certification requirements.
ISO 17024 certification is esteemed within the industry and universally acknowledged by employers worldwide. By aligning with this standard, our course ensures that your qualifications are not only recognized but also highly valued by employers across diverse sectors.
Upon successful completion of the course, you have the opportunity to validate your professional expertise by registering your qualification on the esteemed IBITGQ/GASQ successful candidate register. This platform serves as a testament to your commitment to excellence in IT governance, setting you apart as a distinguished professional in the field.

Candidates must have a form of photographic ID as the invigilator may request to check it before the exam.
Yes, if you are unsuccessful on the first attempt, you can retake the exam for an additional fee. You can email us to schedule the retest for the exam.
To support your continued professional development, it is essential that you maintain an adequate level of current knowledge associated with an ISO 27001 Lead Auditor. To demonstrate this competency to employers and other key stakeholders, you must recertify your IBITGQ qualification at regular intervals.
Individuals awarded the Certified ISO 27001:2022 ISMS Lead Auditor (CIS LA) qualification are required to recertify after three years.
Candidates can undertake a recertification exam any time from one month before or two months after the expiry date (months 35–38) of their certificate. Please see IBITGQ Exams for further details. After this period, candidates can take the standard Certified ISO 27001:2022 ISMS Lead Auditor (CIS LA) exam at any convenient time.
We are dedicated to your learning, qualification, and progression. Committed to offering tailored options for every need, whether it’s driven by deadlines, geared toward your career, spanning your organization, or propelled by personal interests.
Explore our offerings:
Structured learning, with clear direction and guidance from expert practitioners:
Learn and absorb material in a way that works for you:
The most effective learning method for professionals:
Learning as a team and building a culture of awareness: