ISO 27001 Lead Auditor
PECB Certified ISO/IEC 27001 Lead Auditor · PECB
The Lead Auditor proves you can plan, conduct, report on and follow up an audit of an ISMS against ISO/IEC 27001:2022, and manage an audit programme, following ISO 19011 guidelines. It is a reference in France for internal auditors, supplier audits and consultants preparing clients for certification. Its strength is a recognised and very structured audit method; its limit is that certification bodies still apply their own qualification process before letting you lead their audits.
- Exam
- 80 multiple-choice questions (three options, some scenario-based) in 3 h, pass mark 70%. Open book: printed standard, course materials and notes. Online or on paper, often on day 5 of the course.
- Exam price
- $1,000Exam without training, plus a US$500 application fee. The 5-day course (priced by each partner) covers the exam, one retake, the application and the first year of maintenance.
- Required experience
- Lead Auditor grade: five years of experience, including two in information security management, and 300 hours of audit activity. Lower grades exist: Provisional (no experience) and Auditor (two years, 200 hours).
- Validity and maintenance
- Valid 3 years: 90 hours of continuing professional development (CPD) per cycle for the Lead grade and a maintenance fee of US$390 per 3-year cycle.
- Format
- Multiple choice
- Recognition
- ISO/IEC 17024 accredited
Who is it for?
Internal auditors, supplier and third-party risk auditors, GRC consultants and future auditors at certification bodies.
Domains covered
- Fundamental principles and concepts of an ISMS
- ISMS requirements of ISO/IEC 27001
- Fundamental audit concepts and principles
- Preparing an ISO/IEC 27001 audit
- Conducting an ISO/IEC 27001 audit
- Closing an audit and following up
- Managing an audit programme
Belinda’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
