Skip to main content
PECB Partner ID: 232290PECB · 37301Lead AuditorPage updated

PECB ISO 37301 Lead Auditor Course & Exam Australia

Plan and lead compliance management system audits under ISO 37301, ISO 19011, and ISO/IEC 17021-1. Published Self-Study enrolment starts from $849 + GST and includes the official exam access stated on this page. Instructor-led delivery for organisations can be scoped on request; no public cohort is implied unless confirmed dates, mode, venue and trainer are shown.

Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Instructor-led organisational delivery can be scoped on request; no public cohort or classroom venue is implied unless confirmed details are shown. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.

The PECB ISO 37301 Lead Auditor Self-Study course costs A$849 excluding GST (A$933.90 including 10% GST for an Australian billing address) through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months. Typical total learning effort is 35–45 hours. A separate eLearning option is not currently published. For non-Australian billing addresses, Australian GST is not charged and any applicable local taxes are determined at checkout.

Instructor-led delivery is enquiry-only. Aegentra Academy is not currently publishing scheduled live online or classroom cohorts. Contact us to arrange a class for your organisation; Self-Study is available without waiting for a cohort.

Official course provider
PECB
Standard family recorded
ISO 37301
Typical total learning effort
35–45 hours
Self-Study · access period, not effort
12 months access
Initial attempt and one free retake
2 exam attempts included
/ Purchase order

ISO 37301 Lead Auditor course price and enrolment options

Australian totals above include 10% GST. For non-Australian billing addresses, Australian GST is not charged; any applicable local taxes are determined at checkout.

Live online class

Online classes are arranged through the Aegentra Academy team for individual learners and groups.

Contact us for online class

Questions before enrolling?

Ask about prerequisites, delivery, employer invoicing, or which course fits your goal.

We normally reply within one Australian business day.

ISO 37301 Lead Auditor — course at a glance

Course
PECB Certified ISO 37301 Lead Auditor
Standard
ISO 37301:2021 — compliance management systems
Methodology
ISO 19011 and ISO/IEC 17021-1
Duration
5-day equivalent, 35–45 hours self-paced
Exam
3 hours, open book, 80 multiple-choice questions, 100 points, 70% to pass
Materials
450+ pages
CPD
31 credits
Price
$849 + GST

How is the ISO 37301 Lead Auditor exam structured?

Three hours, open book, 80 multiple-choice questions worth 100 points, 70% to pass.

Competency domainQuestionsPoints
Fundamental principles and concepts of a CMS1113.75
Compliance management system requirements1012.5
Fundamental audit concepts and principles1620
Preparing an ISO 37301 audit1012.5
Conducting an ISO 37301 audit2025
Closing an ISO 37301 audit67.5
Managing an ISO 37301 audit programme78.75
Total80100

Audit practice — concepts, preparing and conducting — is 46 of the 80 questions, the highest audit weighting of any PECB Lead Auditor exam in this catalogue. Figures are from PECB Candidate Handbook version 1.5.

How does a CMS audit actually run?

Stage 1 reviews the compliance obligations register, the scope, the compliance risk assessment, and whether internal audit and management review have run. The register is where a Stage 1 succeeds or fails: if obligations are listed without owners, controls or evidence, the system is a spreadsheet rather than a management system.

Stage 2 tests operation — sampling obligations end to end, from the source instrument through the control to the evidence, and testing whether non-compliance is actually detected, escalated and closed. Certification runs three years with annual surveillance.

Compliance obligations vs voluntary commitments

ISO 37301 splits everything an organisation must or chooses to follow into two categories, and getting the split right is most of the work.

  • Compliance requirements — what you must comply with: legislation, regulations, permits, licences, court rulings, and binding contractual terms.
  • Compliance commitments — what you choose to comply with: internal policies, codes of conduct, industry standards, agreements with communities or NGOs, and public undertakings.

Both go in the compliance obligations register, and both are auditable once adopted. The common failure is treating a voluntary commitment as decoration — once it is published and the CMS claims it, an auditor will test whether it is met. Our free ISO 37301 compliance obligations register shows the shape auditors expect.

Internal auditor or lead auditor — which do you need?

An internal auditor audits their own organisation’s CMS to satisfy Clause 9.2, independent of the work audited. A lead auditor plans and leads audits of other organisations, manages a team and owns the conclusions, under ISO 19011 and ISO/IEC 17021-1.

PECB issues no separate ISO 37301 internal auditor credential — managing an audit programme is part of this syllabus, so this course covers internal auditing; actual eligibility depends on experience and the engaging organisation’s requirements.

How does ISO 37301 relate to ISO 37001?

They are complementary and frequently confused. ISO 37301 is the general compliance management system — all obligations, whatever their source. ISO 37001 is a specific anti-bribery management system, deeper on one risk.

Organisations with both usually run ISO 37301 as the frame and ISO 37001 as a specialised programme inside it, sharing governance, training, internal audit and management review. Auditors comfortable with both are worth materially more to a certification body, because one person can cover both scopes. Both also share the high-level structure with ISO 27001 and ISO 9001, so a fourth or fifth standard is a smaller step than the first.

Who hires compliance auditors in Australia?

  • Financial services — banks, insurers, superannuation funds and payments businesses under AUSTRAC and ASIC oversight, where compliance assurance is a standing function.
  • Certification bodies needing CMS assessors — a small pool, since ISO 37301 is young.
  • Regulated infrastructure, health and government suppliers, where compliance capability is scored in procurement.
  • Internal audit functions and consultancies running compliance programmes for clients.

What is included for $849 + GST

What you getIncluded
Self-paced course access via myPECBYes — 12 months
Official PECB exam voucherYes — in the price, no separate exam fee
Free exam resitYes — one, within 12 months of the first attempt
Course materials450+ pages
Credential pathway after an exam pass and approved PECB applicationPECB Certified ISO 37301 Lead Auditor
CPD credits31
Tax invoiceGST tax invoice with ABN issued at checkout

Aegentra Academy is an official PECB authorised training partner. Courses are bought online and studied at your own pace from anywhere in Australia — Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra or regional — with the exam sat under remote proctoring. For group enrolments, email Academy@aegentra.com.au to request a written quote confirming the current price, payment terms and inclusions before purchase.

/ What you get

What's included in the ISO 37301 Lead Auditor course fee

The official PECB course and exam package starts at A$849 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.

Course materials
  • PECB ISO 37301 Lead Auditor slide deck (digital)
  • Over 450 pages of training material with information and practical examples
  • 12 months access via myPECB
  • Exercises, quizzes, and case studies covering the full audit cycle
Exam package
  • Certification and examination fees included in the course price
  • Three-hour exam across seven competency domains
  • One free retake within 12 months of the initial exam date
  • PECB Provisional / Auditor / Lead Auditor credential pathway after an exam pass and approved PECB application
Practitioner extras
  • Audit plan and audit test plan templates
  • Nonconformity report worked examples — major and minor
  • Stage 1 and Stage 2 evidence checklists
  • Attendance record worth 31 CPD credits
/ Exam requirements & credential

ISO 37301 Lead Auditor exam format, duration and pass mark

The exam voucher is included in your enrolment, and so is one free resit if you don’t pass first time. Both the exam and the credential are issued directly by PECB.

Format
Open-book, multiple-choice — stand-alone and scenario-based questions
Duration
3 hours
Questions
80 multiple-choice questions worth 100 points in total, across 7 competency domains — fundamental principles and concepts of a CMS (11 questions, 13.75 points), compliance management system requirements (10 questions, 12.5 points), fundamental audit concepts and principles (16 questions, 20 points), preparing an ISO 37301 audit (10 questions, 12.5 points), conducting an ISO 37301 audit (20 questions, 25 points — the heaviest domain), closing an ISO 37301 audit (6 questions, 7.5 points), and managing an ISO 37301 audit programme (7 questions, 8.75 points). Confirmed against PECB Candidate Handbook version 1.5
Pass mark
70%
Language
English (other PECB languages available on request)
Credential experience requirements

PECB credential ladder: Provisional Auditor (no experience required) → Auditor (two years of professional experience, one in compliance management, plus 200 hours of audit activity) → Lead Auditor (five years, two in compliance management, plus 300 hours) → Senior Lead Auditor (ten years, seven in compliance management, plus 1,000 hours). All tiers require signing the PECB Code of Ethics. Accreditation is program- and scope-specific; verify the applicable credential before enrolment.

An exam pass is the first step. You must submit PECB's certification application and required declarations and references. PECB decides whether the requirements for the requested credential tier are met.

/ Before you enrol

Clear answers about price, tax, exams, and certification.

These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.

What is included in the ISO 37301 Lead Auditor course fee?

The published price is A$849 for Self-Study, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.

What will PECB charge to maintain the ISO 37301 Lead Auditor credential?

PECB’s current maintenance policy lists no maintenance fee for Foundation, Provisional, or Transition credentials. For all other PECB certifications, the published fee is $390 per three-year certification cycle, together with the applicable CPD requirements and continued adherence to the PECB Code of Ethics. PECB sets this fee and may change it, so check the linked policy before renewal.

Can I pay in NZD or another currency, and when is Australian GST added?

Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.

What is the difference between Self-Study and eLearning for ISO 37301 Lead Auditor?

The currently published self-paced option is Self-Study at A$849 before tax, using the official PECB slide-based materials. A separate recorded eLearning price is not currently published for this course. The official exam package is still included, and instructor-led delivery is available only when a confirmed cohort is shown or arranged with Aegentra Academy.

Can I sit the ISO 37301 Lead Auditor exam remotely from New Zealand or another time zone?

Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — 3 hours; format — Open-book, multiple-choice — stand-alone and scenario-based questions; assessment — 80 multiple-choice questions worth 100 points in total, across 7 competency domains — fundamental principles and concepts of a CMS (11 questions, 13.75 points), compliance management system requirements (10 questions, 12.5 points), fundamental audit concepts and principles (16 questions, 20 points), preparing an ISO 37301 audit (10 questions, 12.5 points), conducting an ISO 37301 audit (20 questions, 25 points — the heaviest domain), closing an ISO 37301 audit (6 questions, 7.5 points), and managing an ISO 37301 audit programme (7 questions, 8.75 points). Confirmed against PECB Candidate Handbook version 1.5; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.

Which credential tier will I receive after the ISO 37301 Lead Auditor exam, and who assesses it?

PECB credential ladder: Provisional Auditor (no experience required) → Auditor (two years of professional experience, one in compliance management, plus 200 hours of audit activity) → Lead Auditor (five years, two in compliance management, plus 300 hours) → Senior Lead Auditor (ten years, seven in compliance management, plus 1,000 hours). All tiers require signing the PECB Code of Ethics. Accreditation is program- and scope-specific; verify the applicable credential before enrolment. Passing the exam does not by itself award a credential or guarantee the highest experience-based tier. PECB requires an online certification application and reference contact details, and its Certification Department decides whether the education, professional experience, and audit or assessment activity requirements are met.

What evidence does PECB accept for the experience or project hours for ISO 37301 Lead Auditor?

PECB’s public certification-process page does not publish a closed list of documents that automatically proves project hours. It requires the online application and contact details for references who may be contacted to validate your experience. Keep a dated activity log showing the organisation or client, your role, the audit or assessment activity, dates, responsibilities, and hours; retain employer or client confirmations, statements of work, timesheets, or similar records in case PECB asks for support. The PECB Certification Department assesses the application and makes the final decision.

Can I become both a Lead Implementer and a Lead Auditor?

Yes. You can hold both the ISO 37301 Lead Implementer and ISO 37301 Lead Auditor credentials. They are separate, complementary certifications: Lead Implementer develops implementation knowledge, while Lead Auditor develops audit knowledge. To pursue both, complete each course, pass each exam, and apply for each credential. PECB assesses implementation-project experience for the Implementer tier and audit experience for the Auditor tier separately. If you pass an exam before meeting the full experience requirements, you may apply for the applicable Provisional credential and later request an upgrade. PECB evaluates each upgrade application and may determine whether an examination is required. Neither credential automatically grants the other.

/ Training prerequisites

What you should know before starting ISO 37301 Lead Auditor

  • A general understanding of management systems and compliance concepts.
  • Prior audit experience is helpful but not required — the course teaches audit principles from first principles under ISO 19011.
/ Who this course is for

Who should take the ISO 37301 Lead Auditor course

  • Auditors seeking to perform and lead CMS audits
  • Managers or consultants seeking to master the CMS audit process
  • Individuals responsible for maintaining conformity to ISO 37301 requirements
  • Technical experts preparing for a CMS audit
  • Expert advisers and compliance officers
/ What you'll learn

By the end of this course you’ll be able to:

  • Understand the main concepts of a compliance management system and its processes based on ISO 37301.
  • Acknowledge the relationship between ISO 37301 and other standards and regulatory frameworks.
  • Understand the auditor’s role in planning, leading, and following up on a CMS audit in accordance with ISO 19011.
  • Interpret the requirements of ISO 37301 in the context of a CMS audit.
  • Plan an audit, lead a team of auditors, draft nonconformity reports, and follow up on an audit.
  • Act with due professional care during an audit.
/ Curriculum

ISO 37301 Lead Auditor course curriculum

5 modules, fully on-demand. Click any module to see the topics inside.

01Day 1 — Introduction to the CMS and ISO 37301
  • Training course objectives and structure
  • Standards and regulatory frameworks
  • Certification process
  • Introduction to compliance and a CMS based on ISO 37301
  • An overview of ISO 37301 requirements — Clauses 4 to 10
02Day 2 — Audit principles and preparing for and initiating an audit
  • Fundamental audit concepts and principles
  • The impact of trends and technology in auditing
  • Evidence-based auditing
  • Risk-based auditing
  • Initiation of the audit process
  • Stage 1 audit
03Day 3 — On-site audit activities
  • Preparing for the Stage 2 audit
  • Stage 2 audit
  • Communication during the audit
  • Audit procedures
  • Creating audit test plans
04Day 4 — Closing the audit
  • Drafting audit findings and nonconformity reports
  • Audit documentation and quality review
  • Closing of the audit
  • Evaluation of action plans by the auditor
  • Beyond the initial audit
  • Managing an internal audit programme
05Day 5 — Certification exam
  • PECB Certified ISO 37301 Lead Auditor exam
  • Three hours across the seven competency domains
/ Career signal

Why employers value ISO 37301 Lead Auditor.

The credential that lets you audit, not just advise

Lead Implementer builds the compliance management system; Lead Auditor tests whether it works. This is the credential for the person forming an independent opinion — sampling evidence, interviewing staff, writing findings that will be defended. PECB notes the training can potentially qualify you to conduct audits on behalf of conformity assessment bodies.

Grounded in ISO 19011 and ISO/IEC 17021-1

The audit method is not ISO 37301 specific — it is the general management system auditing discipline of ISO 19011 plus the certification process of ISO/IEC 17021-1. That transfers directly to auditing ISO 27001, ISO 42001, and ISO 22301 systems, which is why auditors accumulate schemes rather than restart each time.

Where it shows up in Australian job descriptions

Internal Auditor, Compliance Auditor, Lead Auditor at a certification body, GRC Consultant, and second-line assurance roles. It also suits compliance managers who need to run a credible internal audit programme rather than outsource every review.

Half of the PECB Master credential

Holding both Lead Implementer and Lead Auditor in a scheme qualifies you for the corresponding PECB Master credential, subject to four additional Foundation exams. Practitioners who intend to consult independently often take both ISO 37301 courses for exactly this reason.

/ Where this lands in Australia

Industries that hire ISO 37301 Lead Auditor talent.

Certification bodies and conformity assessment

Accredited certification bodies need auditors credentialled in each scheme they certify. As ISO 37301 adoption grows in Australia, so does demand for auditors qualified to assess a CMS.

Internal audit functions

Second and third-line functions increasingly review compliance frameworks rather than only financial controls. Auditing a CMS requires understanding what good looks like under ISO 37301 — not just whether a policy exists.

APRA-regulated financial services

Assurance over compliance frameworks is a standing expectation for regulated entities. An auditor who can evidence a systematic, ISO 19011-based method carries more weight with a board audit committee than one working from a bespoke checklist.

Consulting and advisory

Advisers running readiness reviews before a client’s certification audit need to audit the way the certification body will. This course teaches that process from the certification body’s side.

/ Study plan

How to prepare for the ISO 37301 Lead Auditor exam.

The exam is open-book, but the questions reward fluency, not lookup. Plan your study around these checkpoints.

  1. 01Know the difference between a major and a minor nonconformity, and be able to justify the classification. It recurs across several domains and is the most commonly missed judgement.
  2. 02Learn what Stage 1 examines versus Stage 2. Domains 4 and 5 hinge on it, and candidates routinely conflate the two.
  3. 03Practise writing a nonconformity statement in the standard form — requirement, evidence, and the gap between them. Vague findings are the most common real-world audit failure.
  4. 04Be fluent in evidence-based and risk-based auditing as distinct concepts, including how risk shapes sampling.
  5. 05Domain 7 covers managing an audit programme, not conducting a single audit. Do not treat it as a footnote — programme-level questions are easy marks if you have read the section.
  6. 06Read ISO 19011 alongside ISO 37301. The audit method comes from ISO 19011 and the exam assumes you know it.

Free learning resources

Put the course concepts into practice.

Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.

Browse free ISO 37301 resources
/ Related reading

Related ISO 37301 resources

Free companion reading for anyone studying compliance management (CMS) — the certifiable structure behind ASIC, APRA and AUSTRAC expectations:

Compare the family

See where this course fits

The ISO 37301 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.

Compare ISO 37301 pathways

Source and review status

How these course facts are governed

Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.

Official PECB sources

Editorial accountability

Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.

Substantive review status

Official source links are checked separately. A course-specific substantive review date will be published when completed.

/ Accreditation

How can I verify the ISO 37301 Lead Auditor credential pathway?

Official PECB training through an authorised partner. PECB is accredited by IAS and UKAS as a personnel certification body under ISO/IEC 17024 and by ANAB as a certificate issuer under ANSI/ASTM E2659-24. Accreditation is program- and scope-specific—verify the applicable credential before enrolment.

Official PECB training and credential pathway. Check PECB’s current accreditation information and the applicable program scope before enrolment.

This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs governance, risk and compliance engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.

Published courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led delivery for organisations can be scoped on request. No public cohort or classroom venue is implied unless confirmed dates, mode, venue and trainer are shown on the course page. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.

/ Frequently asked

ISO 37301 Lead Auditor — frequently asked.

Do you run live or in-person classes for this course?

The published option is self-paced study. Instructor-led delivery for organisations can be scoped on request, subject to trainer availability, learner numbers and an agreed date. Aegentra does not publish a live or classroom cohort unless its dates, delivery mode, venue (where applicable) and trainer are confirmed. Email Academy@aegentra.com.au with your requirements.

What is the difference between Lead Implementer and Lead Auditor?

Lead Implementer trains you to build and run a compliance management system — scope, obligations, controls, monitoring, improvement. Lead Auditor trains you to independently assess one, using ISO 19011 audit methodology and the ISO/IEC 17021-1 certification process. Implementers build; auditors form an opinion. Holding both qualifies you for the PECB Master credential, subject to four additional Foundation exams.

Can this qualify me to audit for a certification body?

Potentially, yes. PECB states the training course can potentially qualify you to conduct audits on behalf of conformity assessment bodies. Individual certification bodies set their own additional requirements — typically logged audit hours and witnessed audits — so treat the credential as a prerequisite rather than a guarantee.

Is this course available with eLearning?

No. ISO 37301 Lead Auditor is offered as slide-based self-study only at $849 + GST.

Which credential do I receive?

It depends on attested experience. Provisional Auditor requires none. Auditor requires two years with one in compliance management plus 200 hours of audit activities. Lead Auditor requires five years with two in compliance management plus 300 hours. Senior Lead Auditor requires ten years with seven in compliance management plus 1,000 hours. All require signing the PECB Code of Ethics.

How is the exam structured?

Three hours, open book, 80 multiple-choice questions worth 100 points, 70% to pass. Seven competency domains: fundamental concepts and principles of a CMS (11 questions); CMS requirements (10); fundamental audit concepts and principles (16); preparing an ISO 37301 audit (10); conducting the audit (20 — the heaviest); closing the audit (6); and managing an ISO 37301 audit programme (7). Confirmed against PECB Candidate Handbook version 1.5.

Do I need audit experience before taking this?

No. The course teaches audit principles from the ground up under ISO 19011, including evidence-based and risk-based auditing. Existing audit experience in another scheme will make the material faster to absorb, since the method transfers.

Should I do Lead Implementer first?

Not necessarily. They are independent courses and either can be taken first. If you intend to hold both — and the Master credential — most people start with Lead Implementer because understanding how a CMS is built makes it easier to judge whether one is working.

What CPD credits do I earn?

Thirty-one CPD credits — an attendance record is issued to participants who complete the course. These count toward the CPD requirements of ISACA, IIA Australia, GRC Institute, and other professional bodies on submission.

Can my employer pay or reimburse?

Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. For group enrolments, request a written quote confirming the current price, payment terms and inclusions before purchase.

How long does the ISO 37301 Lead Auditor course take?

Self-Study — Typical total learning effort: 35–45 hours. Course-day equivalent: approximately 5 training days. A separate eLearning option and workload are not currently published for this course. These are typical total-learning-effort estimates. They are separate from the 12-month access period, exam duration, any live-class calendar span, and professional-experience requirements.

When can I start the course?

After payment, the Academy team confirms your enrolment with PECB and you receive login details by email — usually within one business day.

How long do I have access to the course?

You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.

What if I fail the exam?

One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.

Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.

$849AUD · EXCL. TAX