ISO 27001 Lead Auditor Training Online — CQI IRCA Approved
CQI IRCA approved training to build information security auditing skills and pass with confidence — a 40-hour, 100% online, live virtual instructor-led course aligned with ISO 19011.
Lead information security audits with confidence
3FOLD Training's CQI and IRCA certified ISO/IEC 27001:2022 ISMS Lead Auditor Course (PR373, Course Approval No. 2889) is a comprehensive 5-day training programme delivered on consecutive days, over weekends, or in evening blocks. It uses auditing role-plays, a realistic audit simulation and hands-on exercises that reflect real-world audit experience.
The course aims to provide delegates with the knowledge and skills required to perform first, second and third-party audits of information security management systems against ISO/IEC 27001:2022, in accordance with ISO 19011 and ISO/IEC 17021-1.
Delegates who successfully complete this course (within the five years before applying to become a certificated auditor) satisfy the training requirement for initial certification as an IRCA ISMS auditor.
Learning outcomes
Explain the purpose of information security management system (ISMS) standards, management-system audit and third-party certification, and the business benefits of effective information security management.
Explain the role of an auditor to plan, conduct, report and follow up an information security management system audit, in accordance with ISO 19011 and ISO/IEC 17021-1.
Plan, conduct, report and follow up an audit of an ISMS to establish conformity, or otherwise, with ISO/IEC 27001:2022, and in accordance with ISO 19011.
Practical, job-ready auditing skills
By the end of the course you'll be able to run a full information security management system audit with confidence — these are the competencies you'll build and practise.
Where this qualification can take you
As cyber and information security risk climbs every boardroom agenda, demand for qualified ISMS auditors keeps growing. A globally recognised CQI/IRCA lead auditor qualification positions you for first-, second- and third-party auditing, consulting and GRC management roles.
Internal ISMS Auditor
Audit your own organisation's information security management system and prepare it for certification.
ISMS Lead Auditor
Lead audit teams and conduct first-, second- and third-party audits, including for certification bodies.
GRC / InfoSec Consultant
Advise organisations on ISO/IEC 27001 implementation, or manage information security and compliance programmes.
Course content — five focused modules
Each module blends short input with hands-on activities and a formative assessment, building one continuous audit of the case-study organisation.
Foundations of ISO/IEC 27001:2022 ISMS Auditing
The ISO/IEC 27001:2022 ISMS standard and the ISO 19011 auditing guidelines — what an ISMS is and why organisations operate one, the clause structure (4–10), Annex A and the Statement of Applicability, the types of audit and the audit process.
ISO/IEC 27001:2022 Audit Planning & Preparation through ISO 19011
Assessing the readiness of the ISMS from the Stage 1 review, then preparing a risk-based Stage 2 audit plan, building an audit checklist and sampling plan, and preparing effective opening meetings.
Conducting the Audit & Gathering Objective Evidence
Practising interviewing, following audit trails and corroborating evidence, and auditing the ISMS requirements across Clauses 4–10 and a risk-based sample of Annex A controls.
Audit Findings, Grading & Nonconformity Reporting
Evaluating evidence to determine conformity and nonconformity, grading findings as major or minor with justification, and writing clear, accurate nonconformity reports.
Finalising the Audit — Closing, Reporting & Follow-Up
The closing meeting, presenting conclusions and recommendations, and post-audit activities — evaluating corrective action, root-cause analysis and audit follow-up.
100% online, virtual instructor-led
The course is 80% learning-by-doing — role-play, audit simulation, preparing audit reports and checklists — delivered as "virtual interactive sessions," same as a physical classroom environment, and better. It runs on Zoom, Nearpod and the 3FOLD LMS (Moodle).
How you're assessed
Continuous evaluation across the course, plus a final open-book examination set by CQI/IRCA, sat online within 30 days of the course.
Five domains, one open-book exam
The exam covers 40 questions worth 80 marks in total, split across five domains — you must reach the minimum pass mark in every domain as well as 50% overall.
Concepts & Principles
8 marks — management systems and ISMS concepts.
Audit Concepts & Responsibilities
8 marks — the auditor's role and responsibilities.
Planning the Audit
8 marks — risk-based audit planning through ISO 19011.
Conducting the Audit
36 marks — gathering evidence and forming findings.
Reporting & Closing
20 marks — nonconformities, reporting and follow-up.
What you can and can't use
Permitted: notes from your training course, and a clean copy (paper or PDF) of the ISO standards.
Achievement vs. Attendance
Learners who pass the continuous assessment and the CQI/IRCA examination receive a Certificate of Achievement; those who attend but do not pass receive a Certificate of Attendance. Only the Certificate of Achievement qualifies you to apply for CQI/IRCA auditor membership.
If you don't take the exam within 30 days, the attempt is marked DNS (Did Not Submit) and no extensions are allowed. You remain eligible for a second attempt within 1 year of course completion.
An officially certified CQI and IRCA course
This is not a generic information security awareness workshop. 3FOLD Training is a CQI IRCA Approved Training Partner, and this programme is an officially CQI and IRCA certified course — so your training and certificate are recognised worldwide.
- Course reference: PR373: ISMS ISO/IEC 27001:2022 Lead Auditor
- CQI/IRCA Course Approval Number: 2889
- Delivered by 3FOLD Training — a CQI IRCA Approved Training Partner
Click the certificate to view it full size.
A CQI IRCA Approved Training Partner you can trust
Officially Approved
An audited CQI IRCA Approved Training Partner delivering certified lead auditor courses across ISO 9001, 14001, 45001 and 27001.
Expert Tutors
Led by practising, experienced information security lead auditors who bring real-world audit judgement to every session.
Up to Date
Course materials fully aligned with the ISO/IEC 27001:2022 revision and the current CQI/IRCA exam format.
Full Support
End-to-end guidance — from a free ISMS Foundation module to exam registration and a fast certificate turnaround.
Real Practice
A complete case-study company and simulated audit give you genuine experience, not just theory.
Globally Recognised
An internationally respected qualification that opens doors to first-, second- and third-party auditing roles worldwide.
Who should attend
This course suits anyone aiming to become a certified ISMS lead auditor or to strengthen their information security auditing capability, including:
- Information security, IT, risk, GRC and compliance professionals
- Internal auditors and management-system professionals moving into ISMS auditing
- Consultants advising on ISO/IEC 27001 implementation
- Anyone pursuing IRCA ISMS auditor certification
Frequently asked questions
What is the ISO 27001 Lead Auditor course?
Is the ISO 27001 Lead Auditor course CQI/IRCA approved?
How long is the course and how is it delivered?
Do I need prior knowledge before the course?
What certificate will I receive?
How is the CQI/IRCA exam structured and what is the pass mark?
Is the ISO 27001 exam open book?
Who should attend the ISO 27001 Lead Auditor course?
Two flexible formats, one course
Choose the rhythm that fits your work. Both formats cover the same 40 hours and the same five modules.
- Sessions 1–3 — Foundations of ISO/IEC 27001:2022 ISMS auditing
- Sessions 4–6 — Audit planning & preparation through ISO 19011
- Sessions 7–9 — Conducting the audit & gathering objective evidence
- Sessions 10–11 — Findings, grading & nonconformity reporting
- Sessions 12–13 — Closing, reporting & follow-up
- Sunday 1 — Foundations of ISO/IEC 27001:2022 ISMS auditing
- Sunday 2 — Audit planning & preparation through ISO 19011
- Sunday 3 — Conducting the audit & gathering objective evidence
- Sunday 4 — Findings, grading & nonconformity reporting
- Sunday 5 — Closing, reporting & follow-up
Upcoming live online sessions
Choose your preferred batch and reserve your place. All sessions are delivered live online via Zoom; times shown in Gulf Standard Time (GST). After you register, a member of the 3FOLD team will contact you within 24 hours with your Zoom joining instructions and LMS access — please ensure your email address is correct.
Sep 21, 22, 23, 24, 25, 28, 29, 30 & Oct 1, 2, 5, 6, 7
13 sessions
Oct 4, 18, 25 & Nov 1, 8
5 Sundays
Can't see a date that suits you? Message us on WhatsApp for the latest calendar and group-booking options.
Ready to become an ISO/IEC 27001:2022 ISMS Lead Auditor?
Reserve your place on the next live cohort, or talk to an advisor about dates and group bookings.
