Quick Answer: The ISO 27001 Lead Auditor exam is open-book and online, with remote proctoring. CQI's learner guide describes 40 questions in 1 hour 45 minutes, and you can't go back once you click Next. Results reach your provider within 10 UK working days. CQI sets no general resit policy, so ask your provider how resits work.
Introduction
An ISO 27001 Lead Auditor course teaches you to audit an information security management system (ISMS) against ISO/IEC 27001, and it ends with an exam. The exam is open book and remotely proctored, so it helps to know how it works before you enrol.
This guide walks through the exam rules before, during and after the exam. Most points come from CQI's online exams guide for learners. Where a point is general information, it says so. Arrangements can change, so confirm them with your training provider.
Before the ISO 27001 Lead Auditor Exam: Booking and Set-Up
You sit the exam within 30 days of the last day of the course, and your training provider arranges your access.
The exam is remotely proctored, so you need a webcam, a microphone and a stable connection. Test them beforehand.
The page on CQI IRCA approved Lead Auditor courses explains how to check a provider's approval.
ISO 27001 Lead Auditor Exam Rules: Open Book, Time Limit and Proctoring
These are the rules in CQI's learner guide.
| Rule | Detail |
|---|---|
| Time | 1 hour 45 minutes, across five sections |
| Questions | 40, computer-marked |
| Open book | Course notes and a copy of ISO/IEC 27001 allowed. No internet searching |
| Proctoring | Webcam, microphone and screen recording |
| Break | One 10-minute break, started with the "Take a break" button |
| Going back | Once you click Next, you can't return to that answer |
| Question types | Multiple choice, multiple response, fill in the blanks, matching, sequencing |
The last two sections include scenario questions. CQI's course listing mentions a two-hour exam, so confirm your exact time, and any extra time you may be entitled to, with your provider.
ISO 27001 Lead Auditor Exam Results, Pass Mark and Resits
CQI checks results for proctoring issues first. If there are none, your result is available to your training provider within 10 UK working days.
CQI doesn't state a numeric pass mark, so ask your provider how it reports results.
CQI sets no general resit policy, and it mentions a free resit only where a significant technical problem caused by CQI's online system affected your performance. Ask your provider about its resit arrangements. The Lead Auditor e-assessment guide has more detail.
Does Passing the ISO 27001 Lead Auditor Exam Make You a Certified Auditor?
Passing completes the course. It doesn't make you an IRCA certified auditor, which also needs audit experience and an application. The steps are explained in how to become a CQI IRCA certified auditor.
Conclusion
The exam rules are simple, but they leave little room for error. Practise under the clock, test your equipment, and keep your notes and your copy of the standard organised.
Frequently Asked Questions
Is the ISO 27001 Lead Auditor exam open book?
Yes. You can use your course notes and need a copy of ISO/IEC 27001, but you can't search the internet.
Is the ISO 27001 Lead Auditor exam online?
Yes. It's online and remotely proctored with your webcam, microphone and screen recording.
Can I go back to a previous question in the ISO 27001 Lead Auditor exam?
No. Once you click Next, you can't return to review or change that answer.
Can I retake the ISO 27001 Lead Auditor exam if I fail?
CQI sets no general resit policy, so resits depend on your training provider. Ask your provider before you enrol.
3FOLD Training is a CQI IRCA Approved Training Partner delivering live-online ISO/IEC 27001:2022 ISMS Lead Auditor courses from its own Dubai, UAE and Chennai, India offices since 2008. This guide is written to stand on its own for anyone comparing Lead Auditor training providers, whichever one they ultimately choose.
Ready to Prepare for the ISO 27001 Lead Auditor Exam?
3FOLD Training delivers the CQI IRCA approved ISO/IEC 27001:2022 ISMS Lead Auditor course. View the course details, check upcoming batches, or message the team on WhatsApp with your questions.