Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

PECB Authorized Training Partner

PECB Certified ISO/IEC 27001 Lead Auditor

PECB Authorized Boot Camp. Official courseware, expert instructors, exam, certification fee, free retake, and 31 CPD credits included. Four days to lead an ISMS audit.

Verified for 2026 ISO-27001-LA Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official PECB

Authorized Training

PECB Authorized Training Partner

Exam Ready in Four Days. Plan the Audit. Lead It.

For internal auditors and certification body auditors. Four days to plan, conduct and close an information security management system (ISMS) audit against ISO/IEC 27001:2022, with the PECB exam and one free retake included.

Program Abstract

REF: ISO-27001-LA 7
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 4

An Audit Is Only as Good as the Evidence Behind It.

ISO 19011 gives you the method and ISO/IEC 17021-1 the certification process. Four days on applying both to an ISMS built to ISO/IEC 27001:2022: planning the audit, gathering evidence that holds up, interviewing without leading, writing nonconformities people can act on, and closing the loop.

Official PECB Training.

We deliver the official PECB courseware, taught live by PECB-certified instructors. Every module maps to the certification exam objectives.

System Integrity Check
Content Source PECB Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

We include your PECB certification exam in the course price. No surprise fees. You take the exam on the final day of your course.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

Your exam voucher is included. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with exam-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Free Retake Included.

If you do not pass on your first attempt, we include one free retake within 12 months, covered by your course fee. The exam is open-book: 80 multiple-choice questions in three hours.

Thursday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM All of our trainers carry a wide range of certifications, including the certification for every program they teach or manage.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

PECB Authorized Training Partner

PECB Authorized Training Partner

Official PECB courseware taught live by PECB-certified instructors. Four days that follow the official course structure through to the exam.

7 exam domains

All 7 Exam Domains in Four Days

ISMS fundamentals, ISO/IEC 27001, audit principles, then preparing, conducting, closing and managing an ISO/IEC 27001 audit program.

Exam fee included

Exam and Certification Fee Included

The PECB exam is 80 multiple-choice questions, open-book, three hours, and both the exam and certification fees are in your course price.

Audit standards

Audit to ISO 19011 and 17021-1

Plan, conduct and close an ISMS audit the way certification bodies do, using ISO 19011 principles and the ISO/IEC 17021-1 process.

Free retake

Free Exam Retake

If you do not pass your first attempt, we include one free retake within 12 months of the exam, covered by your course fee.

CPD credits

31 CPD Credits

PECB issues an attestation of course completion worth 31 CPD credits you can put toward other certifications’ continuing-education requirements.

PECB Certified ISO/IEC 27001 Lead Auditor

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    ISO/IEC 27001 Lead Auditor
    Boot Camp Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3

    MODULE_ID: PECB-27001LA-U-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Foundations of ISO/IEC 27001 and Audit Principles

    Training Course Objectives, Structure, and PECB Exam Format
    L.01.1
    ISO/IEC 27000 Family, ISO 19011, and ISO/IEC 17021-1
    L.01.2
    Regulatory Frameworks: GDPR, NIS2, and Sector Obligations
    L.01.3
    Certification Process: Stage 1, Stage 2, Surveillance, Recertification
    L.01.4
    Fundamental Concepts: Confidentiality, Integrity, Availability, Risk
    L.01.5
    Information Security Controls, Vulnerabilities, Threats, and Impact
    L.01.6
    Exercise: Identifying Interested Parties and Their Requirements
    L.01.7
    Clause 4 Context, Scope, and the ISMS Boundary
    L.01.8
    Clause 5 Leadership, Policy, Roles, and Responsibilities
    L.01.9
    Clause 6 Risk Assessment, Risk Treatment, and Objectives
    L.01.10
    Clauses 7 and 8 Support, Documented Information, and Operation
    L.01.11
    Clauses 9 and 10 Performance Evaluation and Improvement
    L.01.12
    Annex A 2022: 93 Controls in Four Themes and the SoA
    L.01.13
    Exercise: Mapping Evidence Sources to Clause Requirements
    L.01.14
    Case Study: Reading a Statement of Applicability Critically
    L.01.15

    MODULE_ID: PECB-27001LA-U-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Audit Planning and Preparation

    ISO 19011 Audit Principles: Integrity, Independence, Due Care
    L.02.1
    Audit Types: First-Party, Second-Party, and Third-Party Certification
    L.02.2
    Auditor Competence, Behavior, and Ethics
    L.02.3
    Impact of Trends and Technology in Auditing
    L.02.4
    Evidence-Based Auditing: Types of Evidence and Reliability
    L.02.5
    Risk-Based Auditing, Sampling, and Materiality
    L.02.6
    Exercise: Classifying Audit Evidence by Reliability
    L.02.7
    Audit Objectives, Scope, Criteria, and Feasibility
    L.02.8
    Audit Team Selection and Initial Contact With the Auditee
    L.02.9
    Audit Plan, Duration Calculation, and Logistics
    L.02.10
    Documented Information Review and Statement of Applicability Review
    L.02.11
    Stage 1 Audit: Readiness, Scope Confirmation, and Site Conditions
    L.02.12
    Stage 1 Findings and Preparing the Stage 2 Plan
    L.02.13
    Exercise: Drafting an Audit Plan for a Mid-Size Organization
    L.02.14
    Case Study: Conducting a Stage 1 Documentation Review
    L.02.15

    MODULE_ID: PECB-27001LA-U-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Conducting the ISO/IEC 27001 Audit

    Preparing for the Stage 2 Audit: Work Documents and Checklists
    L.03.1
    Opening Meeting Agenda and Roles
    L.03.2
    Stage 2 Audit: Evaluating Implementation and Effectiveness
    L.03.3
    Communication During the Audit and Managing Conflict
    L.03.4
    Interviewing Techniques Without Leading the Auditee
    L.03.5
    Auditing Risk Assessment and Risk Treatment Processes
    L.03.6
    Exercise: Running an Opening Meeting
    L.03.7
    Case Study: Interviewing Process Owners on Access Control
    L.03.8
    Audit Procedures: Observation, Document Review, Interview, Sampling
    L.03.9
    Technical Verification and Corroboration of Evidence
    L.03.10
    Creating Audit Test Plans for Annex A Controls
    L.03.11
    Auditing Organizational, People, Physical, and Technological Controls
    L.03.12
    Collecting and Recording Objective Evidence
    L.03.13
    Audit Working Papers and Traceability
    L.03.14
    Exercise: Writing an Audit Test Plan for Logging and Monitoring
    L.03.15
    Exercise: Sampling Access Reviews and Change Records
    L.03.16

    MODULE_ID: PECB-27001LA-U-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Reporting, Follow Up, and Certification Readiness

    Drafting Audit Findings: Major and Minor Nonconformities, Observations
    L.04.1
    Writing Nonconformity Reports With Evidence, Requirement, and Statement
    L.04.2
    Audit Documentation and Quality Review
    L.04.3
    Audit Report Structure and Conclusions
    L.04.4
    Closing Meeting and Presenting Findings to Management
    L.04.5
    Evaluating Root Cause Analysis and Corrective Action Plans
    L.04.6
    Exercise: Writing Nonconformities From Audit Evidence
    L.04.7
    Case Study: Delivering Difficult Findings at a Closing Meeting
    L.04.8
    Beyond the Initial Audit: Surveillance and Recertification
    L.04.9
    Follow-Up Audits and Verifying Corrective Action Effectiveness
    L.04.10
    Managing an Internal Audit Program Under Clause 9.2
    L.04.11
    Auditor Competence Evaluation and Audit Program Improvement
    L.04.12
    Closing of the Training Course and Certification Pathways
    L.04.13
    Seven-Domain Review and Open-Book Exam Strategy
    L.04.14
    Full-Length Practice Exam and Review
    L.04.15
    Exam: PECB Certified ISO/IEC 27001 Lead Auditor
    L.04.16

    MODULE_ID: POST

    Live Training QS: ~7
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 4
    FREQUENTLY ASKED QUESTIONS

    ISO/IEC 27001 Lead Auditor
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    The PECB Certified ISO/IEC 27001 Lead Auditor credential shows you can plan, lead and report an audit of an information security management system against ISO/IEC 27001:2022, using the audit principles in ISO 19011 and the certification process in ISO/IEC 17021-1. It is the qualification certification bodies and internal audit teams look for.

    Internal auditors, auditors working for or toward a certification body, consultants who assess client security programs, and information security managers who want to audit their own ISMS credibly before a certification body does.

    PECB asks for a fundamental understanding of ISO/IEC 27001 and a working knowledge of audit principles. Formal audit experience is not required to attend; it is required later if you want the Lead Auditor credential rather than the Provisional or Auditor level.

    Day 1 introduces the ISMS and ISO/IEC 27001:2022. Day 2 covers ISO 19011 audit principles and preparing and initiating an audit. Day 3 is on-site audit activities: interviews, evidence, sampling, findings. Day 4 closes the audit: reporting, corrective action follow-up and managing an audit program. The four days follow PECB’s official course structure, with the exam at the end.

    The exam covers 7 competency domains: fundamental principles and concepts of an ISMS; the ISMS and ISO/IEC 27001; fundamental audit concepts and principles; preparing an ISO/IEC 27001 audit; conducting an ISO/IEC 27001 audit; closing an ISO/IEC 27001 audit; managing an ISO/IEC 27001 audit program. Questions are weighted across the domains, and the course is organized so every domain is taught before you sit the exam.

    The exam has 80 multiple-choice questions, a mix of standalone and scenario-based, and lasts 3 hours. It is open-book, and the passing score is 70%. Online exams are graded instantly.

    Yes. Both the PECB certification exam and the certification fee are included in your course fee, and the exam is scheduled at the end of the course. There is nothing extra to buy to get certified.

    Yes. We include one free exam retake within 12 months of your first attempt, and it is covered by your course fee.

    It is the standard first step. Certification bodies also require documented audit hours and experience before you lead third-party audits, and PECB grades its credential in levels for that reason: Provisional Auditor with no experience, Auditor, Lead Auditor, and Senior Lead Auditor as your logged audit hours grow.

    Lead Auditor assesses an information security management system against the standard. Lead Implementer builds and operates one. Auditors test whether the system works; implementers make it work. Compare all of our PECB courses side by side on the PECB training courses page.

    As of 2026 the current edition is ISO/IEC 27001:2022, and audits are conducted against it. This course teaches the 2022 requirements and the 93-control Annex A that auditors now test against.

    Yes. PECB issues an attestation of course completion worth 31 CPD (Continuing Professional Development) credits to everyone who attends the course.

    Yes. PECB is accredited to ISO/IEC 17024, the international standard for bodies certifying people, and its credentials are recognized internationally. Training Camp delivers the official PECB courseware as an authorized training partner.

    Get the Free
    PECB-27001LA-U Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    ISO/IEC 27001 Lead Auditor
    Articles & Resources

    How PECB exams work, how Lead Auditor differs from Lead Implementer, and what separates an audit from a technical test.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Continue Your Journey

    ISO 27001 LA Related Courses

    Advance your career with these recommended certifications

    Featured on