Prerequisites
Course-specific entry requirements are not published here. Contact a course adviser to confirm suitability before paying.
PROFESSIONAL COURSE · Courses, Information Security and Data Privacy
ISO 27100 Lead Auditor
Plan and conduct audits of cybersecurity governance, evaluate evidence and follow up findings on cybersecurity concepts, risk controls and improvement priorities.
- Practical, standards-based professional learning
- Assessment and verifiable Cognicert certification
- Flexible online, self-study and organisational delivery
Is this the right course for you?
What you will work on
- Understand the key concepts and framework of ISO/IEC TS 27100:2020
- Assess the effectiveness of cybersecurity governance in an organization
- Plan, conduct, report, and follow up on cybersecurity audits
Who this course is for
This course is ideal for:
- Cybersecurity professionals and risk managers
- Information Security Managers (ISMs)
- Lead Auditors or Internal Auditors
- IT/IS Consultants
- Professionals involved in GRC (Governance, Risk, and Compliance)
- Those seeking to qualify as ISO/IEC TS 27100 Lead Auditors
Entry, exam and access at a glance
Exam and resits
100 questions in one hour. Pass mark: 70%. Your payment includes two exam attempts. A third or later attempt costs £100 per resit.
Platform-wide pass rate: 87% across all examined trainees, based on Cognicert’s exam-platform results. This is not a course-specific pass rate or a guarantee of an individual result.
Self-study access
Lifetime access for the enrolled learner. Access is personal and cannot be shared.
Overview+
Plan and conduct audits of cybersecurity governance, evaluate evidence and follow up findings on cybersecurity concepts, risk controls and improvement priorities.
Work through cybersecurity concepts, risk controls and improvement priorities and connect them to the responsibilities of your audit or assessment role. The detailed programme explains the methods and activities covered.
Objectives+
By the end of the course, participants will be able to:
- Understand the key concepts and framework of ISO/IEC TS 27100:2020
- Assess the effectiveness of cybersecurity governance in an organization
- Plan, conduct, report, and follow up on cybersecurity audits
- Evaluate an organization’s response to threats and vulnerabilities
- Demonstrate compliance with ISO/IEC TS 27100 in the context of ISO 27001 audits
- Lead an audit team using ISO 19011 audit techniques
Audience+
This course is ideal for:
- Cybersecurity professionals and risk managers
- Information Security Managers (ISMs)
- Lead Auditors or Internal Auditors
- IT/IS Consultants
- Professionals involved in GRC (Governance, Risk, and Compliance)
- Those seeking to qualify as ISO/IEC TS 27100 Lead Auditors
Standards+
- ISO/IEC TS 27100:2020 – Cybersecurity – Overview and Concepts
- ISO/IEC 27001:2022 – Information Security Management
- ISO/IEC 27032:2012 – Cybersecurity Guidelines
- ISO/IEC 27005:2022 – Information Security Risk Management
- ISO 19011:2018 – Guidelines for Auditing
- ISO/IEC 17021-1:2015 – Conformity Assessment Requirements for Auditing Bodies
- Understand cybersecurity fundamentals, including threat types and actors
- Conduct effective audits of cybersecurity controls and governance
- Evaluate compliance with ISO/IEC TS 27100 concepts
- Lead an audit team and manage audit programs
- Receive a Lead Auditor Certificate (exam-based)
- Cybersecurity scope and principles
- Introduction to ISO/IEC TS 27100:2020
- Relationship to ISO/IEC 27001 and other frameworks
- Cybersecurity domains and terminology
- Threat actors, attack vectors, and vulnerabilities
- Cybersecurity lifecycle and control categories
- Case study review of recent cyber incidents
- Group exercise: Identify gaps in cyber coverage
- Risk management in cybersecurity (ISO/IEC 27005 approach)
- Cyber governance vs. IT governance
- Regulatory & legal landscape overview (NIS, GDPR, etc.)
- Integrating TS 27100 into ISMS (ISO 27001)
- Maturity models and cybersecurity capability assessments
- Risk identification and mitigation workshop
- Interactive group discussion: Applying 27100 in different sectors
- Overview of ISO 19011 auditing guidelines
- Audit planning: scope, objectives, and team roles
- Document review and audit checklist development
- Conducting opening meetings and interviews
- Evidence collection, audit techniques (sampling, triangulation)
- Managing audit findings and nonconformities
- Role-play simulation: Audit interviews and observations
- Workshop: Drafting audit plan and checklist
- Audit reporting: structure and key content
- Follow-up and corrective action verification
- Presenting findings professionally
- Auditor code of ethics and behavior
- Final written Lead Auditor Examination
- Course wrap-up and Q&A
- Final practical audit simulation (team-based)
- Multiple-choice and scenario-based certification exam
- Final course review
- Final exam: multiple-choice and scenario-based questions
Delivery+
- Interactive lectures with real-world examples
- Workshops and breakout sessions
- Case studies based on real cyber incidents
- Mock audits and team simulations
- Quizzes & review sessions for exam readiness
- Final day proctored exam and certification
Duration+
5 Days
Delivery Options:
- Self-Study Material, Exam and Certification
- Online Training, Material, Exam and Certification
- Classroom Training Location: https://cognicert.com/delivery-partners/
ONE STANDARD · FIVE LEARNING LEVELS
Choose your ISO/IEC 27100 course
Compare the focus and training duration of each level. Choose the level that fits your responsibilities; you do not need to book every level in sequence.
View the complete ISO/IEC 27100 training pathwayISO/IEC 27100 Awareness
People who need an introduction to the standard and their role in supporting it.
Self-study: £60On demand · study at your own pace
Live online: £1607–11 December 2026
20% December discount included. Payment deadline: 9 November 2026, 23:59 UK time. No extension to late booking. Not combined with group discounts.
The date shown is an intake window, not the duration of your course. Ask for the exact teaching dates, hours and time zone before booking. Per learner, before applicable UK VAT. Review your total before payment.ISO/IEC 27100 Foundation
People building a working understanding of the standard before taking on implementation or audit responsibilities.
Self-study: £120On demand · study at your own pace
Live online: £4007–11 December 2026
20% December discount included. Payment deadline: 9 November 2026, 23:59 UK time. No extension to late booking. Not combined with group discounts.
The date shown is an intake window, not the duration of your course. Ask for the exact teaching dates, hours and time zone before booking. Per learner, before applicable UK VAT. Review your total before payment.ISO/IEC 27100 Internal Auditor
People preparing to plan and carry out internal audits within their organisation.
Self-study: £200On demand · study at your own pace
Live online: £6007–11 December 2026
20% December discount included. Payment deadline: 9 November 2026, 23:59 UK time. No extension to late booking. Not combined with group discounts.
The date shown is an intake window, not the duration of your course. Ask for the exact teaching dates, hours and time zone before booking. Per learner, before applicable UK VAT. Review your total before payment.ISO/IEC 27100 Lead Auditor
Auditors and professionals preparing to lead an audit team or manage a complete audit programme.
Self-study: £400On demand · study at your own pace
Live online: £9607–11 December 2026
20% December discount included. Payment deadline: 9 November 2026, 23:59 UK time. No extension to late booking. Not combined with group discounts.
Per learner, before applicable UK VAT. Review your total before payment.ISO/IEC 27100 Lead Implementer
Managers, consultants and professionals responsible for establishing, maintaining or improving a system.
Self-study: £400On demand · study at your own pace
Live online: £9607–11 December 2026
20% December discount included. Payment deadline: 9 November 2026, 23:59 UK time. No extension to late booking. Not combined with group discounts.
Per learner, before applicable UK VAT. Review your total before payment.Choose a level and study mode to enrol directly; no preliminary enquiry is needed for an available booking. Your existing basket confirms the date, price, applicable VAT and final total before secure Stripe payment. Invoice requests remain available.
Durations refer to the training programme. Course details explain entry requirements, assessment and the award for successful candidates. Training does not certify your organisation. Self-study access or live-course joining instructions follow payment and any applicable eligibility checks. Read refund and transfer conditions.
Refunds, cancellations and transfers
Refund and transfer choices depend on the course format, how much notice you give and whether digital content has been accessed. Contact learner care early and we will help you identify the best available option.
Read the complete refund, cancellation and transfer policy →UPCOMING COURSE CALENDAR
Training, exam and application dates
Prices are per learner before any applicable UK VAT. A live-online intake costs more after its standard deadline because the published late fee is added. Self-study is priced separately and has no late-intake fee.
| TRAINING DATES | EXAM | DEADLINE & STATUS | LIVE ONLINE | SELF-STUDY |
|---|---|---|---|---|
| 7–11 December 2026 | 11 December 2026 | 20% December discount included Pay by 9 November 2026, 23:59 UK time. No extension. Standard booking period Standard deadline: 9 November 2026. No late fee yet. After this deadline, a £50 late fee applies until 20 November 2026. Places are confirmed at booking, not guaranteed by this calendar. | £960 Choose this intake | £400 On-demand study; next exam shown at checkout. |
DECEMBER 2026 COURSE OFFER
Save 20% when you pay by the November deadline.
For December 2026 course intakes with a published standard payment deadline in November. Pay in full by that course’s standard deadline at 23:59 UK time. The discount ends on that date and does not continue to the late or extended deadline. Invoice requests and reservations alone do not qualify. Applicable VAT is added separately. Cannot be combined with group discounts.
Compare courses, dates and fees →Learn your way
Live online · Self-study · Classroom · Onsite
Classroom enquiries: London, Manchester, Birmingham, Dubai and the Netherlands. Venue, dates and fees are confirmed before booking.
Other classroom locations and scheduled events →
Request an onsite or corporate quotation →Speak to a course adviser
We aim to respond within minutes during office hours: Monday–Friday, 09:00–17:00 UK time. Enquiries received outside these hours are handled on the next working day.
+44 20 4653 0696
bizdev@cognicert.com
RECOGNITION & MEMBERSHIPS
Know who stands behind your learning.
ISCB, United States: Cognicert’s ISO/IEC 17050 Declaration of Conformity to ISO/IEC 17021-1 and ISO/IEC 17024 requirements is recognised by International Services for Certification Bodies.
UK Registered Learning Provider: UKPRN 10091575. Registration is a provider listing.
Association of Healthcare Trainers, UK: member.
The CPD Group: approved CPD provider. Individual course CPD status is confirmed where applicable.
Listed on ISO Central as an ISO registrar →
VERIFIABLE ACHIEVEMENT
Check your Cognicert certificate
Successful candidates receive a uniquely numbered Cognicert certificate that another person can check through our public certificate-verification service. This confirms the authenticity of a Cognicert-issued award; acceptance by an employer, regulator or external professional scheme depends on their requirements.
View certificate verification →YOUR COURSE ADVISER
info@cognicert.com
Need help before enrolling?
Lisa Williams
Course and Business Development Adviser
Monday–Friday, 09:00–17:00 UK time
info@cognicert.com
Self-study from £400per learner · excl. applicable VATEnrol self-study
Ready to enrol?
Choose online or self-study and continue securely to Stripe.