Skip to main content
AI Act

ISO 42001 Lead Auditor

ISO 42001 Lead Auditor. Review available formats, prerequisites, current inclusions and certification terms before booking.

PECBLead Auditor5 daysLiveSelf-pacedIn-house
  • Practitioner-led, taught by a working CISO
Christophe Mazzola

Taught by

Christophe Mazzola

Practicing CISO · Founder of Cyber Academy

See full profile →

For

Right fit if you are.

  • ✓Internal or external auditors seeking to specialise in AI management system auditing
  • ✓Managers or consultants aiming to master the ISO/IEC 42001 audit process
  • ✓Individuals responsible for ensuring their organisation maintains conformity with AIMS requirements
  • ✓Expert advisors in AI management looking to formalise their audit competence
  • ✓Professionals involved in analysing AI-related business requirements
  • ✓Individuals engaged in developing or designing AI solutions within organisations

Honest call

NOT for. When to skip it.

We'd rather you keep your money than buy the wrong path.

  • ✗Participants with no background in auditing or management systems will likely find the five-day programme demanding without prior foundational study
  • ✗Those seeking implementation skills rather than audit skills should consider the Lead Implementer course instead
  • ✗Individuals looking only for an introductory overview of ISO/IEC 42001 are better served by the Foundation course before progressing to this level

Outcomes

What you'll be able to do

  • 1Explain the fundamental concepts and principles of an AI management system based on ISO/IEC 42001
  • 2Interpret ISO/IEC 42001 requirements from an auditor's perspective to assess conformity
  • 3Evaluate an organisation's AIMS against ISO/IEC 42001 requirements using established audit principles
  • 4Plan, initiate, and execute an ISO/IEC 42001 compliance audit in line with ISO/IEC 17021-1 and ISO 19011
  • 5Conduct on-site audit activities including gathering evidence and documenting findings
  • 6Close an audit by preparing conclusions, communicating results, and following up on corrective actions
  • 7Manage an ISO/IEC 42001 audit programme across multiple audits and time periods

Programme

Day by day

Day 1Introduction to the AI management system and ISO/IEC 42001

  • Core concepts of AI management and ISO/IEC 42001 scope

    Participants review the structure and intent of ISO/IEC 42001 and how its requirements apply to organisations that develop or deploy AI systems.

  • AIMS requirements interpreted from an auditor's viewpoint

    This module examines how auditors read and apply ISO/IEC 42001 clauses when assessing an organisation's management system for conformity.

By end of day

  • • Describe ISO/IEC 42001 requirements in terms relevant to an audit context
  • • Distinguish between implementation responsibilities and audit evaluation responsibilities
Day 2Audit principles and preparation for initiating an audit

  • Fundamental audit concepts and principles

    Participants study the principles that underpin credible auditing, including integrity, fair presentation, confidentiality, and evidence-based approaches, as reflected in ISO 19011 guidance.

  • Preparing the audit programme and audit plan

    This module covers how to establish audit objectives, scope, and criteria, and how to develop a structured audit plan before entering the organisation.

  • Initiating the audit and conducting a document review

    Participants practise the steps for formally opening an audit engagement and reviewing AIMS documentation to identify areas requiring on-site attention.

By end of day

  • • Apply core audit principles to plan a credible ISO/IEC 42001 audit
  • • Develop an audit plan with clear objectives, scope, and criteria
  • • Identify document review findings that will guide on-site audit activities
Day 3On-site audit activities

  • Conducting interviews and collecting audit evidence

    Participants learn techniques for gathering sufficient and appropriate evidence through observation, interviews, and document sampling during on-site visits.

  • Evaluating evidence and identifying nonconformities

    This module focuses on how auditors analyse collected evidence against ISO/IEC 42001 requirements and categorise nonconformities and observations.

  • Managing on-site audit communication

    Participants practise how to communicate interim findings to the auditee during the on-site phase to maintain transparency and accuracy.

By end of day

  • • Collect and evaluate audit evidence against ISO/IEC 42001 requirements
  • • Classify findings as nonconformities, observations, or opportunities for improvement
  • • Communicate on-site findings clearly and professionally to auditee representatives
Day 4Closing of the audit

  • Preparing the audit report

    Participants draft audit conclusions and structure an audit report that accurately reflects evidence gathered and the organisation's conformity status.

  • Closing the audit and following up on corrective actions

    This module covers the formal audit closing meeting, communication of results, and the auditor's role in verifying that corrective actions are addressed appropriately.

By end of day

  • • Prepare a structured, evidence-based audit report
  • • Conduct a closing meeting and communicate audit conclusions to stakeholders
  • • Establish a follow-up process for verifying corrective action effectiveness
Day 5Managing an ISO/IEC 42001 audit programme

  • Establishing and managing an audit programme

    Participants explore how to plan, implement, monitor, and improve a multi-audit programme that delivers consistent and credible results over time.

  • Competence and performance evaluation of auditors

    This module addresses how audit programme managers assess auditor competence and continuously improve audit team performance.

By end of day

  • • Design an ISO/IEC 42001 audit programme with appropriate objectives and resources
  • • Monitor audit programme performance and drive continual improvement
  • • Evaluate auditor competence to maintain the quality of the audit function

Public sessions

Upcoming public sessions

Open-enrolment cohorts. Pick a date and book your seat. Want a private cohort for your team instead? Request an in-house quote.

No confirmed live cohort right now. You can still:

Buy the self-paced licenceRequest an in-house quote

Deep dive

Everything inside this certification

The detail behind the headline. Read at your own pace. Each section answers a buyer question we get on discovery calls.

The “PECB Certified ISO/IEC 42001 Lead Auditor” exam meets the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:

  • Domain 1: Fundamental principles and concepts of an AI management system
  • Domain 2: AI management system requirements
  • Domain 3: Fundamental audit concepts and principles
  • Domain 4: Preparing an ISO/IEC 42001 audit
  • Domain 5: Conducting an ISO/IEC 42001 audit
  • Domain 6: Closing an ISO/IEC 42001 audit
  • Domain 7: Managing an ISO/IEC 42001 audit program

After successfully passing the exam, you can apply for one of the credentials shown below. You will receive the certificate once you comply with all the requirements related to the selected credential.

The requirements for PECB ISO/IEC 42001 Auditor certifications are as follows:

To be considered valid, the audit activities should follow best audit practices and include the following:

  • Planning an audit
  • Managing an audit program
  • Drafting audit reports
  • Drafting nonconformity reports
  • Drafting audit working documents
  • Reviewing and managing documented information related to the audit
  • Conducting on-site audits
  • Following up on nonconformities
  • Leading an audit team
  • Certification and examination fees are included in the price of the training course.
  • Participants will be provided with training course materials containing over 400 pages of information, practical examples, exercises, and quizzes.
  • An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
  • Candidates who have completed the training course but failed the exam are eligible to retake the exam once for free within a 12 month period from the initial date of the exam.

Educational approach

  • Integrates essential theoretical principles, ISO/IEC 42001 requirements, and industry-leading practices employed in AI management system audits
  • Enhances lecture sessions by illustrating concepts with practical examples derived from relevant case studies
  • Facilitates preparation through essay-type exercises and multiple-choice quizzes, some of which are scenario-based designed to closely replicate the format of the certification exam

Building Digital Trust through Responsible AI Audit

digital trust

FAQ

Buyers always ask

Is the certification exam included with this course?+

Exam inclusion depends on the delivery format and commercial option selected. Check the booking summary or ask Cyber Academy for written confirmation before registering.

Completing the training, passing the applicable exam, and meeting the PECB credential requirements are separate steps.

Which international standards and guidelines does this course reference for audit methodology?+

The course draws on ISO/IEC 17021-1, which sets requirements for bodies providing audit and certification of management systems, and ISO 19011, which provides guidelines for auditing management systems. Both frameworks inform how participants plan, conduct, and close ISO/IEC 42001 audits.

Do I need prior auditing experience to attend this course?+

PECB's stated requirement is a fundamental understanding of ISO/IEC 42001 and AI principles. While prior auditing experience is not listed as a formal requirement, participants who arrive with some auditing or management system background are likely to engage more readily with the audit methodology content covered from Day 2 onward.

How does this Lead Auditor course differ from the Lead Implementer course?+

The Lead Auditor course develops the skills needed to independently plan, conduct, and close audits of an organisation's AI management system and to manage an ongoing audit programme. The Lead Implementer course focuses on initiating, planning, and sustaining an AIMS implementation within an organisation. The two programmes address different professional roles, though knowledge of both perspectives strengthens overall AIMS competence.

What competency domains are covered by the PECB ISO/IEC 42001 Lead Auditor exam?+

According to PECB, the exam spans seven domains: fundamental principles and concepts of an AI management system; AI management system requirements; fundamental audit concepts and principles; preparing an ISO/IEC 42001 audit; conducting an ISO/IEC 42001 audit; closing an ISO/IEC 42001 audit; and managing an ISO/IEC 42001 audit programme.

For details on exam format, available languages, and specific rules, PECB publishes this information through its official examination documentation.

Next step

Where this leads

Pillar guide

Read the full AI Act guide

EU AI Act readiness work for providers and deployers across the four risk tiers.

Ready to get certified?

Taught by a practicing CISO. Prices and exam terms shown up front.

Buy a live seatBuy self-paced licenceRequest a quote