After this course you can lead an ISMS audit from preparation to the final report. You plan on a risk basis, ask the right questions, assess evidence and write nonconformities that the audited team can act on. You will also be able to set up an internal audit programme. The course suits you if you want to lead audits, support them as an ISMS owner, or understand as a specialist what auditors look for. You should have a basic grasp of ISO/IEC 27001 and comprehensive knowledge of audit principles.
What you’ll take away.
- Interpret ISO/IEC 27001 from an auditor's perspective
- Plan audits on a risk basis and create audit test plans
- Assess evidence and write clear nonconformity reports
- Close an audit and evaluate action plans
- Set up and manage an internal audit programme
Your training in detail
- Who is it for?
- Auditors, consultants and ISMS owners who want to lead or confidently support audits, plus specialists preparing for an audit.
- Prerequisites
- PECB expects a fundamental understanding of ISO/IEC 27001 and comprehensive knowledge of audit principles.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
The ISMS and ISO/IEC 27001 from an auditor's viewpoint
Audit principles, risk-based and evidence-based auditing
Initiating the audit and conducting the stage 1 audit
Stage 2 audit: test plans, procedures and communication
Findings, nonconformity reports and quality review
Closure, action plan evaluation and the internal audit programme
Exam domains and scenario questions
Using fictional documents and interview notes, you audit one control area, assess the evidence and write a nonconformity report.
Exams, licences & credentials
This course prepares you for the PECB Certified ISO/IEC 27001 Lead Auditor exam. The exam and its fees are included only if your offer confirms this. The certificate comes from PECB, not NextNowa. This is not an official PECB course.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Can I then audit for certification bodies?
Each certification body decides this under its own requirements. The course alone does not give you that entitlement.
Does the course help with internal audits?
Yes. You learn audit technique and how to build an internal audit programme, even if you never plan to audit externally.
Does PECB Certified ISO/IEC 27001 Lead Auditor: auditing an ISMS include a certificate?
This course prepares you for the PECB Certified ISO/IEC 27001 Lead Auditor exam. The exam and its fees are included only if your offer confirms this. The certificate comes from PECB, not NextNowa. This is not an official PECB course.