Quick Answer: IRCA's published Lead Auditor criteria require a passed IRCA certified course plus 7 audits, 35 audit days and 25 on-site days within 5 years of applying. At least 3 audits must be ones you led. IRCA's page doesn't mention ISMS specifically, so confirm the ISMS requirements with IRCA before you apply.
Introduction
An ISO 27001 Lead Auditor course is the training stage on the route to IRCA certification. Passing it completes the course, and IRCA's audit experience requirements come after.
This guide sets out those requirements as IRCA publishes them: audits, audit days, on-site days and the five-year window. Anything else is marked as general information. Criteria can change, so check IRCA before you apply.
What Is IRCA Certification and What Does CQI IRCA Stand For?
IRCA certification is a professional grade for auditors who meet IRCA's training and audit experience requirements.
As general information, CQI is the Chartered Quality Institute and IRCA is the International Register of Certificated Auditors. They appear together as CQI IRCA on approved courses.
IRCA Lead Auditor Requirements: Audits, Audit Days and On-Site Days
IRCA's published Lead Auditor criteria are summarised below.
| Requirement | Detail |
|---|---|
| Training | Passed an IRCA certified auditor/lead auditor course |
| Audits covering the full audit cycle | At least 4 audits, 20 audit days, including 15 on-site days |
| Audits you led as team leader | At least 3 full audits, 15 audit days, including 10 on-site days |
| Total | 7 audits, 35 audit days, 25 on-site days |
| Timing | Audits must fall within 5 years of the application date |
Do Remote Audits Count Towards IRCA Lead Auditor Requirements?
IRCA's page says remote audits are accepted, with the time recorded as on-site time. It doesn't mention ISMS specifically, so confirm the ISMS requirements directly with IRCA.
CQI's course listing says completing the ISMS course within the five years before applying satisfies the training requirement for initial IRCA ISMS auditor certification.
ISO 27001 Lead Auditor Course Completion vs IRCA Certification
Passing the course doesn't make you certified. The article on ISO 27001 Lead Auditor course completion vs auditor certification explains the difference, and how the CQI IRCA ISO 27001 Lead Auditor pathway works sets out the stages in order.
Internal Auditor or Lead Auditor: Which ISO 27001 Course Suits You?
If you mainly audit your own organisation, an Internal Auditor course may suit you better. See Internal Auditor vs Lead Auditor for the differences.
Conclusion
The IRCA route is simple to describe: take an approved course, build audit experience that meets the numbers, then apply. Start keeping a record of your audits early, and confirm the ISMS details with IRCA.
Frequently Asked Questions
Does passing the ISO 27001 Lead Auditor exam make me IRCA certified?
No. You also need audit experience that meets IRCA's criteria, and you must apply to IRCA.
How many audits do I need to become an IRCA Lead Auditor?
IRCA's published criteria require 7 audits totalling 35 audit days, including 25 on-site days. At least 3 must be full audits that you led.
Can remote audits count towards IRCA Lead Auditor requirements?
IRCA's page says remote audits are accepted, with the time recorded as on-site time.
How long is ISO 27001 Lead Auditor training valid for an IRCA application?
Five years, according to CQI's course listing. Apply within that window.
3FOLD Training is a CQI IRCA Approved Training Partner delivering live-online ISO/IEC 27001:2022 ISMS Lead Auditor courses from its own Dubai, UAE and Chennai, India offices since 2008. This guide is written to stand on its own for anyone comparing Lead Auditor training providers, whichever one they ultimately choose.
Ready to Start With an Approved ISO 27001 Lead Auditor Course?
3FOLD Training delivers the CQI IRCA approved ISO/IEC 27001:2022 ISMS Lead Auditor course. View the course details, check upcoming batches, or message the team on WhatsApp with your questions.
