The PECB ISO 28000 Lead Auditor training course enables you to develop the necessary competencies to perform security management system (SeMS) audits by applying widely recognized audit principles, procedures, and techniques. This training course integrates the ISO/IEC 17021-1 requirements, the ISO 19011 guidelines, and other best practices of auditing, in order to equip you with the necessary competencies for planning, conducting, and closing ISO 28000 conformity assessment audits successfully. 

Besides the theoretical basis, the training course also provides a hands-on approach by providing examples, exercises, and quizzes to reinforce your understanding of the key aspects of ISO 28000 conformity assessment audits, including the interpretation of ISO 28000 requirements in the context of an audit, the principles of auditing, the application of audit methods and approaches to evidence collection and verification, leading an audit team, drafting nonconformity reports, preparing the audit report, and following up on nonconformities.

After completing the training course, you can sit for the exam. If you successfully pass the exam, you can apply for the “PECB Certified ISO 28000 Lead Auditor” credential. The internationally recognized “PECB ISO 28000 Lead Auditor” certificate validates your professional expertise and demonstrates that you have the knowledge and skills to audit an SeMS based on ISO 28000.

Who should attend

The ISO 28000 Lead Auditor training course is intended for:

• Auditors seeking to perform and lead SeMS audits 
• Individuals responsible for maintaining conformity to the ISO 28000 requirements
• Technical experts seeking to prepare for an SeMS audit
• Professionals wanting to pursue a career in management systems conformity assessments
• Security management consultants 
• Regulators responsible for ensuring compliance with security standards and regulations 
• Management representatives seeking to master the SeMS audit process

Prerequisites
In order to fully benefit from this training course, participants should have a basic understanding of ISO 28000 and audit principles.

Course agenda

DAY 1 | Introduction to the security management system (SeMS) and ISO 28000

DAY 2 | Audit principles and the preparation for and initiation of an audit

DAY 3 | On-site audit activities

DAY 4 | Closing of the audit

DAY 5 | Certification Exam

Training material

The participant will receive training materials containing more than 400 pages of information and practical examples in electronic form via the KATE application. As part of the full-time course, the participant will also receive training materials in printed form.

Examination

The “PECB Certified ISO 28000 Lead Auditor” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:

• DOMAIN 1 | Fundamental principles and concepts of a security management system
• DOMAIN 2 | Security management system requirements
• DOMAIN 3 | Fundamental audit concepts and principles
• DOMAIN 4 | Preparing an ISO 28000 audit
• DOMAIN 5 | Conducting an ISO 28000 audit
• DOMAIN 6 | Closing an ISO 28000 audit
• DOMAIN 7 | Managing an ISO 28000 audit program

The exam takes the form of a test consisting of 80 multiple-choice questions. It is an open-book exam, where candidates are allowed to use the following reference materials: training course materials, any personal notes taken during the training course, a hard copy dictionary, and a hard copy of a standard. The exam lasts 3 hours and can be taken online or in paper form. If you do not pass the exam, you can repeat the exam for free within 12 months.

For specific information about exam types, languages available, and other details, please visit the List of PECB Exams and the PECB Examination Rules and Policies.

Price

The price includes participation in the course, electronic training materials, exam and PECB certification fees. In addition, the price of the full-time course includes a printed copy of the training material, lunch on the training days and refreshments.

Certification

After successfully completing the exam, you can apply for one of the credentials shown on the table below. You will receive a certificate as soon as you fulfill all the requirements related to the selected credential.

For more information about the ISO 28000 certifications and the PECB certification process, please refer to the Certification Rules and Policies.

The table below presents the requirements for PECB ISO 28000 Auditor certifications: