1 Course certificate vs registration
A course certificate shows you passed training. Registration with a scheme shows you have also done real audits. Certification bodies, consultancies and supplier-audit teams often ask for both.
2 IRCA grades (CQI and IRCA)
| Grade | Training | Audit experience (summary) |
|---|---|---|
| Associate Auditor | IRCA certified auditor course | Not yet met for a higher grade |
| Internal Auditor | Foundation + internal auditor course, or a lead auditor course | 5 internal audits, each at least 3 hours, outside your own work area |
| Auditor | Lead auditor course (or conversion course) | 4 audits covering the full audit cycle: 20+ days, 15+ on site |
| Lead Auditor | Lead auditor course (or conversion course) | As Auditor plus 3 full audits as team leader (15+ days, 10+ on site) — 7 audits, 35 days, 25 on site in total |
| Principal Auditor | Lead auditor course to the latest version, among other routes | Senior auditing career — e.g. three years full-time as an auditor with an accredited certification body |
Audits must be after the course and within five years of applying; remote audits count. IRCA certification lasts five years, with recertification based on recent audits and at least three completed CPD objectives.
3 PECB credentials
PECB grades by experience after its exam. For ISO/IEC 27001 Lead Auditor: Provisional Auditor (no experience), Auditor (2 years’ work experience, 1 in the field, 200 audit hours), Lead Auditor (5 years, 2 in the field, 300 hours), Senior Lead Auditor (10 years, 7 in the field, 1,000 hours). Implementer credentials follow the same pattern. Certificates last three years with CPD and an annual fee.
4 Typical paths
- Internal route: foundation → internal auditor → audits in your organisation → lead auditor → supplier audits → audit programme manager or quality/compliance manager.
- Certification body route: lead auditor (often in more than one standard, via conversion courses) → trainee or associate auditor → auditor → lead auditor, with sector competence assessed by the certification body.
- Implementer route: foundation → implementer / lead implementer → system manager or consultant.