ISO/IEC 27001 — Lead Auditor

Learn the seven auditing principles behind every credible management system audit, why they exist, and how violating any one of them can invalidate an otherwise technically correct audit finding.

Learn how an audit program manager plans a multi-year cycle of audits, allocates competent auditors to each one, and monitors the program itself for effectiveness — the layer of management above any single audit.

Learn the three defining parameters of any single audit — objectives, scope, and criteria — and why confusing 'criteria' with 'the standard' produces an audit no one can actually be held to.

Learn how to review an organization's documented information before ever setting foot on-site, and how to turn objectives/scope/criteria into a concrete, working audit plan and checklist.

Learn what a real opening meeting needs to establish before any evidence-gathering begins, and how to keep on-site activities aligned to the audit plan as the day unfolds.

Learn the core techniques for actually gathering audit evidence — asking effective interview questions, sampling records credibly, and triangulating between what people say, what documents show, and what direct observation reveals.

Learn how to move from collected evidence to a defensible audit finding — separating a fact from an inference, checking evidence against criteria rather than personal opinion, and recognizing when evidence is too thin to support a conclusion either way.

Learn how certification audits classify findings into major nonconformity, minor nonconformity, and observation — and why this classification, not just the finding itself, is what actually determines the consequences for certification.

Learn what a defensible audit report actually contains, why every finding must be traceable back to its evidence, and how to write a report that survives scrutiny from someone who wasn't in the room.

Learn how to present findings at the closing meeting without ambush, handle a disputed finding professionally, and verify that corrective actions actually close a nonconformity rather than just paper over it.

Learn what specific competencies an auditor actually needs beyond knowing the standard, how auditors themselves are evaluated and maintained, and how to reason through ethical situations that don't have a clean rule to fall back on.

Learn how certification bodies themselves are held accountable — accreditation, impartiality safeguards, audit duration and multi-site sampling rules, and what happens when a certificate is suspended or withdrawn.

A comprehensive review and 20-question practice exam covering everything from lessons 1-12 — ISO 19011 principles, audit programs and planning, evidence collection, findings and classification, reporting, closure, auditor ethics, and the ISO/IEC 17021-1 certification body perspective.