Information security · Auditor conversion
ISO/IEC 27001 Auditor conversion
For people who already hold a lead auditor certificate in one standard and want to audit another — for example a quality lead auditor moving into ISO 14001 or ISO 27001. About three days, with an exam.
1 About this qualification
This is a auditor conversion course applied to ISO/IEC 27001, the standard for information security.
Requirements for an information security management system: assessing information security risks, treating them with appropriate controls, and keeping the system effective. Annex A lists 93 reference controls in four themes.
2 UK courses
Course names, certification, duration and delivery as stated by each provider. We do not list prices — they change often; see the provider’s page.
| Course (as named by the provider) | Provider | Certified by | Duration | Link |
|---|---|---|---|---|
| ISO 27001:2022 Auditor Conversion - CQI & IRCA CertifiedVirtual classroom; In-house | LRQA | CQI and IRCA certified | 3 days | Course pagechecked 3 October 2026 |
| CQI and IRCA ISO 27001 Lead Auditor Conversion Training (A2593)Virtual – tutor led | NQA | CQI and IRCA certified | 3 days | Course pagechecked 3 October 2026 |
| ISO 27001 Auditor Conversion Training Course | Bywater | CQI and IRCA certified | 3 days | Course pagechecked 3 October 2026 |
| ISO/IEC 27001:2022 Auditor Conversion Course — CQI|IRCA ref PR374 | Batalas | CQI and IRCA certified | 3 days | Course pagechecked 3 October 2026 |
Certified by: CQI and IRCA certified (4). What the schemes mean.
3 How it is assessed
| Scheme | Typical length | Assessment |
|---|---|---|
| CQI and IRCA | Approx. 24 hours (UK providers run 3 days) | Written examination of 1 hour 40 minutes, per CQI and IRCA’s course table |
| Provider-branded | 3 days | Varies |
4 How to prepare
- Conversion and transition courses: how to prepareShort courses for people who already audit: moving to a new standard (conversion) or to a new edition (transition). Focus on what is differ…
- ISO/IEC 27001: structure and key clausesThe clauses to know before day one.
Practice questions
- ISO/IEC 27001:2022 information security 8 questions
- Harmonized Structure (clauses 4–10) 9 questions
- Audit findings and nonconformities 8 questions
- Certification schemes and auditor registration 9 questions
5 Other ISO/IEC 27001 qualifications
- ISO/IEC 27001 Foundation / requirements 6 courses
- ISO/IEC 27001 Internal auditor 7 courses
- ISO/IEC 27001 Lead auditor 8 courses
- ISO/IEC 27001 Implementer / lead implementer 7 courses
- ISO/IEC 27001 Transition (new edition) 2 courses