CQI and IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course

Level Lead auditor Duration 5 days

Available to book: Virtual classroom Contact us for booking

Upcoming schedule

Live online schedule
9-13 March 2026
18-22 May 2026

Classroom-based schedule
19-23 January 2026 (Kuala Lumpur)
20-24 April 2026 (Kuala Lumpur)

Can’t find the right courses or dates? Get our full schedule and training guide, or talk to our training advisor for assistance.

Find out more

This training course combining knowledge, skill and digital tools - Connect Plus audit platform in one unique package.

Develop the expertise and confidence to lead Occupational health and safety (OH&S) management system audits with this CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course. The programme builds the knowledge and practical skills needed to plan, conduct, and report audits that support continual improvement.

This training course incorporates BSI’s Connect Plus audit platform, which you’ll use throughout the skills-based activities to simulate real audit scenarios. Guided by experienced BSI tutors, you’ll apply ISO/IEC 27001:2022, ISO 19011:2018, and best-practice auditing methods in a structured, practical environment that builds confidence in delivering first, second, and third-party audits.

Earn a BSI Auditor QualificationEarn a BSI Auditor Qualification

This course forms part of the BSI Auditor Qualification pathway. On successful completion of the online exam, you’ll achieve a BSI Qualification, recognised with the BSI Mark of Trust, an international symbol of auditing competence that you can showcase across your CV, digital profiles, and workplace communications.

Why learners choose BSI

A clear qualification pathway: With BSI, your training supports progression toward an internationally recognised professional credential.
Exclusive digital tools: Access BSI’s Connect Plus audit platform during the course, with continued use for you and up to nine colleagues.
A proven learning experience: Activity-based, scenario-driven teaching helps you turn knowledge into practical auditing performance.

- Develop the confidence to lead an audit team
- Conduct an organizational audit of an ISMS in line with ISO/IEC 27001:2022
- Protect private data to future-proof your organization and ensure compliance
- 4 hours of on-demand eLearning on ISO/IEC 27001 requirements - flexible, self-paced, and accessible anytime. Start as soon as you receive your login details, before, during, or after the live training.
- 5 days of live virtual training or instructor-led sessions focused on audit preparation, execution, and evaluation.
- Online examination - assess your learning and eligibility for the BSI Mark of Trust.
- Successful participants receive the BSI Mark of Trust, a symbol of globally recognized achievement that demonstrates your competence, integrity, and commitment to quality.
This course is suitable for those wishing to Lead audits of ISMS in accordance with ISO/IEC 27001:2013 (either as a 2^nd party, or 3^rd party auditor), those wishing to learn about effective audit practices. Security and quality professionals, existing information security auditors who wish to expand their auditing skills and consultants who wish to provide advice on ISO/IEC 27001:2022 ISMS Auditing.

Prerequisites
Delegates are expected to have the following prior knowledge:

a. Management systems
Understand the Plan-Do-Check-Act (PDCA) cycle.

b. Information security management
Knowledge of the following information security management principles and concepts:
- Awareness of the need for information security
- The assignment of responsibility for information security
- Incorporating management commitment and the interests of stakeholders
- Enhancing societal values
- Using the results of risk assessments to determine appropriate controls to reach acceptable levels of risk
- Incorporating security as an essential element of information networks and systems
- The active prevention and detection of information security incidents
- Ensuring a comprehensive approach to information security management
- Continual reassessment of information security and making of modifications as appropriate
c. ISO/IEC 27001
Knowledge of the requirements of ISO/IEC 27001 (with ISO/IEC 27002) and the commonly used information security management terms and definitions, as given in ISO/IEC 27000.
On completion, you’ll be awarded a CQI and IRCA Certified course certificate.
This training is fully claimable under HRD Corp claimable course, eligible under the HRD Corp claimable programme in Malaysia. Once your booking is confirmed, our team will provide the required documents and guidance to support your company’s grant application.

Let's shape your organization's future together

Reach out and see how we can help guide you on your path to sustainable operational success.

Get in touch