Skip to main content

Certification you can stand behind.

Lead auditor

ISO 27001 Lead Auditor

Lead information security management system audits against ISO/IEC 27001:2022, including the restructured Annex A control themes.

5 daysClassroom, Live online, In-houseISO 27001
Enquire about this course

What you will be able to do

  • Interpret ISO/IEC 27001:2022 clauses and Annex A themes as audit criteria

  • Audit risk assessment, risk treatment and the Statement of Applicability credibly

  • Plan and lead ISMS audits from programme to close-out under ISO 19011

  • Sample technical and organizational controls with appropriate depth

  • Report findings that stand up to technical and executive audiences

  • Recognize the depth of evidence an external auditor works to

You leave able to

Lead auditor capability in ISO 27001

Course agenda

  1. Days 1-2: ISMS requirements

    • Context, leadership, planning and the risk-management core
    • Annex A themes: organizational, people, physical, technological
    • Evidence expectations across policies, logs and technical controls

  2. Days 3-4: Auditing the ISMS

    • Audit planning, sampling strategies and technical interviews
    • Auditing the SoA, risk treatment and incident management
    • Findings workshops using realistic ISMS case material

  3. Day 5: Leadership and examination

    • Leading audit teams and managing scope tension
    • Reporting, follow-up and corrective-action evaluation
    • Written examination and practical assessment

Course materials

Every delegate works from a printed or digital workbook and runs the audit exercises on case material prepared for the course.

How it is delivered

ClassroomOffered

  • Scheduled public dates
  • Full cohort exercises
  • Best for first-time auditors

Live onlineOffered

  • Tutor-led, not recorded
  • Breakout audit exercises
  • No travel time or cost

In-houseOffered

  • Your site, your schedule
  • Case material set in your sector
  • Priced per group, not per seat

This course teaches the standard and how it is audited. It is not consultancy: trainers do not design, document or review your management system, and attending gives you no advantage in a CORE certification decision. Why we keep those separate.

Booking this course

Dates are set against demand and in-house programmes run on your dates. Tell us the format and we confirm availability.

Taking bookings

Classroom

Scheduled cohorts, full exercise programme

Dates confirmed on enquiry

Request dates
Taking bookings

Live online

Tutor-led with breakout audit practice

Dates confirmed on enquiry

Request dates
Taking bookings

In-house

Your site or live online, on your dates

Dates confirmed on enquiry

Request dates

Enquire about this course

Tell us who is attending and where; we respond with dates, delivery options and a quote.

Optional

CORE uses these details only to respond to your enquiry. Read the privacy policy.

Standards this course supports

ISO 27001

Information Security

Security questionnaires answered in days, enterprise deals unblocked and risk owned at the right level.

Information security