Learn to plan, conduct and report audits of an AI management system against ISO/IEC 42001. Build the judgement to question a control claim, test the supporting evidence and explain your findings. Choose official PECB Self-Study or recorded eLearning through Aegentra Academy, with the examination package included.
The brochure describes the PECB programme. Use the current package conditions when planning access and retakes.
ISO 42001 Lead Auditor at a glance
The essentials for choosing your learning format and planning your study.
Course facts and planning essentials
Course fact
Details
Standard
ISO/IEC 42001:2023
Official course provider
PECB
Enrolment partner
Aegentra Academy
Self-paced choices
Self-Study or recorded eLearning
Published study effort
Approximately 30–40 hours; allow additional preparation time as needed
Self-paced access
12 months
Official examination
Included in both self-paced options
Retake
One included retake within the applicable PECB policy window
Private training
Enquire for confirmed scope, instructor, dates and fees
Credential decision
PECB, following examination and application assessment
Study effort is an estimate, not the length of the videos or a guaranteed completion time. Examination and certification conditions are set by PECB.
Choose how to study ISO 42001 Lead Auditor
Both self-paced options prepare you for the same PECB examination pathway. The difference is how you prefer to learn, not a different credential at the end.
eLearning costs A$20 more before GST. The difference is the learning format.
What is included in the examination package?
The partner-course package includes the first PECB exam attempt, one free retake, the certification application fee and first-year maintenance where applicable. PECB's current rules set the conditions and timing. For Self-Study and eLearning, plan around the applicable 12-month cycle from purchase rather than assuming the deadline restarts after an unsuccessful attempt.
Later certification maintenance, further attempts beyond the included retake and separately purchased practice products are not unlimited inclusions. An optional Aegentra Labs purchase is not required to obtain the official exam voucher already included with the course.
Learn privately with Dr Harbir Singh, a PECB Certified Trainer for this course. Work through the ISO 42001 auditing methodology with live explanation and discussion, then connect your learning to practical audit work in a separate consultant session.
A$2,799 + GSTA$3,078.90 including Australian GST.
Flexible one-to-one teaching
Choose four days of six-hour teaching sessions, or spread the same 24 teaching hours across eight days of three-hour sessions. Weekday and weekend options are available. Teaching dates and session times are mutually agreed before booking confirmation.
Official PECB eLearning
Recorded PECB learning material alongside the live teaching, so you can revisit concepts within your agreed access period.
One additional hour with an Aegentra consultant
Discuss ISO 42001 audit planning, evidence sampling, findings and reporting using practical examples. Bring questions about applying the course methodology to your work. This educational session is arranged separately at a mutually agreed time; it is not an audit engagement or certification decision.
One month of Labs practice included
One month of Aegentra Labs access for ISO 42001 Lead Auditor, with unlimited attempts at the available practice questions during your access period. This is included in the private package and is separate from the optional A$89 + GST add-on for 12 months.
Aegentra Labs is independently authored supplementary practice, not official PECB examination questions. Unlimited attempts apply to Labs practice, not the PECB examination.
Before payment, we confirm your assigned instructor and applicable trainer authorisation, eLearning and Labs access arrangements, examination arrangements and booking terms. This is private online training, not a scheduled group classroom course.
Official training. Clear choices. Evidence-focused guidance.
A useful course page should tell you what you are buying and what it does not guarantee. Aegentra brings the learning formats, examination conditions and experience-based credential pathway together so you can make that decision before enrolling.
The original audit example and companion resources on this page focus on the work behind an audit conclusion: identifying the criterion, selecting evidence, testing a claim and recording a finding. They supplement the official PECB learning route; they do not replace the course, the examination or professional experience.
What does an ISO 42001 Lead Auditor learn to assess?
An AI management system audit examines how an organisation governs AI within its defined scope. The auditor connects requirements and organisational commitments to evidence of how decisions are made, responsibilities are assigned, risks and impacts are addressed, and performance is reviewed.
This is not a course in building machine-learning models, and an AIMS audit does not certify that every model output is correct or that a product is free from bias. Technical evaluations may form part of the evidence, but the auditor still needs the competence to understand their relevance and limitations.
Examples of evidence an AIMS auditor may examine
Evidence category
What you may examine
AI scope and responsibilities
Defined organisational boundaries, relevant AI uses, accountable owners and assigned responsibilities.
Risk and impact assessment
The basis for assessing organisational risks and effects on affected people, together with decisions and follow-up.
AI suppliers and data
Supplier assessments, agreed responsibilities, available data information and how information gaps are handled.
Human oversight
Relevant procedures, decision records, escalation paths and evidence that reviewers can intervene where required.
AI lifecycle and change
Stated acceptance criteria, evaluation results, change approvals and monitoring relevant to the AI use.
Management-system performance
Audit results, management review, objectives, corrective actions and evidence of follow-through.
These are illustrative evidence categories, not a universal mandatory-document checklist. Relevance depends on the audit scope, applicable requirements and the organisation's actual arrangements.
Develop the skills to interpret AIMS requirements, organise an audit, evaluate evidence and communicate conclusions. The following is Aegentra's plain-English overview of the official course agenda, not a claim that each block is a separate video module.
1. Understand the AIMS
Establish what the organisation is trying to govern, which activities fall within scope and which requirements apply. Distinguish a documented intention from evidence that the management system operates.
2. Prepare the audit
Define objectives and criteria, consider relevant risks, organise the audit team and plan a proportionate sample. Prepare questions that connect the requirements to real processes rather than simply asking whether a policy exists.
3. Conduct the audit
Use document review, interviews and other appropriate evidence to test the arrangements. Follow important gaps and inconsistencies, record the evidence considered and avoid conclusions that go beyond the sample.
4. Report and follow up
Explain findings in a way that identifies the applicable requirement and supporting evidence. Understand closing activities, corrective-action follow-up and the management of an audit programme.
PECB publishes a five-day agenda that includes an examination day. Self-paced study does not require five consecutive calendar days; any Aegentra live teaching timetable is confirmed separately.
A policy says people review AI-assisted decisions. What would you test?
Original Aegentra learning example · Fictional organisation · Not an official PECB exam question
Harbour People uses an AI-assisted recruitment tool. Its own approved procedure, AIP-04 version 1.2, requires a named reviewer, a review timestamp and a recorded final decision before a recruitment outcome is communicated. These are the fictional organisation's stated requirements, not a quotation from ISO 42001.
Evidence received
You sample ten completed screening cases. Eight contain the required review record. Two have no such record in the evidence provided. The team leader says every case is reviewed, but you have not yet seen alternative evidence for those two cases.
What to investigate next
Do not jump from two missing records to the claim that the entire AI system is uncontrolled. Confirm the applicable procedure, request relevant workflow or audit logs, and establish whether the review was performed and whether the required records were retained. Consider whether the sample should be extended.
A possible finding after follow-up
“If the follow-up confirms that the required records were not retained, the finding could state: AIP-04 version 1.2 requires a named reviewer, timestamp and final decision for each completed screening case. In the sample of ten cases, HP-07 and HP-09 had no retained record meeting those requirements. The organisation therefore did not demonstrate conformity with its specified review-record requirement for those cases.”
This wording identifies a record-keeping conformity issue. It does not, by itself, establish that no human review occurred. Finding classification and the broader audit conclusion depend on the full evidence, applicable criteria and audit process.
Would eight complete records be enough to disregard the two gaps?
No. The complete records are relevant positive evidence, but they do not remove a potential exception to a requirement that applies to every completed case. Investigate the gaps and their significance before reaching the conclusion.
ISO 42001 Lead Auditor exam and certification requirements
The official PECB examination is included in your enrolment. PECB's published course brochure specifies a three-hour exam covering seven competency domains. Check the current PECB exam listing for the applicable language, assessment format, question count and pass mark before booking.
Passing the exam and earning the Lead Auditor credential are different steps
After passing, apply to PECB for the credential supported by your professional and audit experience. Learners without the required experience for a higher tier can consider the Provisional Auditor pathway. PECB assesses the application; Aegentra cannot pre-approve the credential awarded.
PECB ISO/IEC 42001 Auditor credential pathway
Credential
Professional experience
Audit/assessment activity experience
Provisional Auditor
No minimum
No minimum
Auditor
Two years, including one year in AI
200 hours
Lead Auditor
Five years, including two years in AI
300 hours
Senior Lead Auditor
Ten years, including seven years in AI
1,000 hours
All tiers require the relevant examination or accepted equivalent and the applicable certification requirements, including the PECB Code of Ethics. Training attendance and independent practice do not automatically count as accepted professional audit hours.
Ongoing certification conditions are separate from course completion. Check PECB's current maintenance and continuing professional development requirements for the tier you hold before renewal; do not assume the enrolment price covers every future fee.
Use these Aegentra-created learning resources to turn an audit question into a structured record. Start with the worked example, then adapt the blank fields to another fictional scenario. The resources are learning aids, not a complete audit methodology or a substitute for the relevant standards.
Audit planning worksheet
Define the audit objective, scope, criteria, processes, sample rationale and evidence you intend to examine.
Keep a dated record of your audit role, activities, hours and supporting references. PECB decides which experience satisfies its certification requirements; the worksheet does not guarantee acceptance.
Keep employment and client fields blank until recording a real engagement. Never log this fictional example or course attendance as real professional audit experience.
Organisation or client
The real organisation, subject to confidentiality restrictions.
audit reference
A traceable reference for the real engagement.
audit dates
The dates the audit activities occurred.
scope
The scope of that engagement.
audit type
Internal, supplier or certification audit, as applicable.
role
Your actual role in the engagement.
activities personally performed
Only work you personally performed.
hours
Actual qualifying activity hours, with a defensible basis.
evidence/reference retained
Supporting evidence retained with appropriate protection.
Original Aegentra learning resources · Version 1.0 · 11 September 2026. Use your browser’s Print command for a paper or PDF copy of the previews.
An AI inventory, impact assessment or Statement of Applicability may be part of the evidence you review. Explore the existing ISO 42001 worked resources with that audit perspective, rather than treating a completed template as proof of conformity.
Is ISO 42001 Lead Auditor the right course for you?
This course is relevant to internal auditors, management-system auditors, AI governance professionals, risk and compliance teams, consultants and people preparing to contribute to AIMS assurance. It is particularly useful when your task is to evaluate arrangements and evidence rather than design the management system from the beginning.
You should have a fundamental understanding of ISO 42001 and AI concepts. Foundation can help you build that knowledge, but a Foundation certificate is not automatically a compulsory first step. Previous ISO 27001 or other management-system audit experience is useful; it does not remove the need to understand AI-specific risks, impacts and evidence.
Useful when you are responsible for evaluating conformity and evidence.
The Implementer and Auditor routes are complementary, not interchangeable. Holding both does not remove the need for objectivity or make it appropriate to independently audit your own implementation work. Choose based on the role you need to perform, then check the credential requirements for that route.
Australia's Guidance for AI Adoption provides practical guidance for responsible AI use and develops the earlier Voluntary AI Safety Standard. For an auditor, the important distinction is between a reference framework, an organisation's adopted commitments and the actual criteria of the audit.
A mapping between guidance and ISO 42001 can help organise questions, but it does not prove conformity or legal compliance. Identify the relevant scope and criteria, then examine the evidence. Course completion does not certify an organisation or guarantee that an AI system meets every applicable obligation.
Aegentra Labs offers separately identified practice products to support further study. Any optional exam-preparation product is separate from the official PECB examination and should be chosen for the additional practice it provides, not because it is needed to unlock the course's exam voucher.
Aegentra-created practice questions and simulations are not official PECB examination questions. Availability, access duration and price are stated with the relevant Labs product.
Recorded eLearning is delivered through PECB's course platform. Any private live training arranged through Aegentra has a separately confirmed instructor and schedule. The presenters in a recorded course should not be assumed to be the instructors for a private booking.
Questions before enrolling
Can I study ISO 42001 Lead Auditor online from Australia?
Yes. Aegentra's Self-Study and recorded eLearning options are delivered online through PECB. They do not require attendance at a scheduled classroom course. Private live training is a separate enquiry-based option.
Is Self-Study the same as eLearning?
No. Self-Study centres on the official digital course materials. Recorded eLearning adds video teaching. Both are self-paced and include the official examination package; choose the format that suits how you learn.
Is the exam an extra charge?
The official exam package is included with the course. An optional Aegentra Labs practice product is separate and is not the fee for your official PECB examination. See the inclusions above for the applicable package conditions.
Do I have to complete ISO 42001 Foundation first?
A Foundation certificate is not automatically required. You should already understand the fundamentals of ISO 42001 and AI concepts. Foundation is a useful starting point when that knowledge is new to you.
Do I need coding or machine-learning engineering experience?
This is management-system audit training, not a model-development course. Coding experience is not presented as the entry requirement. You do need enough AI knowledge and scope-relevant competence to evaluate evidence and recognise when specialist input is needed.
How long should I allow for study?
Aegentra publishes approximately 30–40 hours of typical self-paced learning effort. Actual preparation depends on your background and study habits. The estimate is not a promise of video length, exam readiness or completion within a particular week.
Will I automatically become a PECB Lead Auditor when I pass?
No. Passing the examination and meeting the experience requirements are separate. PECB decides which credential your application supports. See the four-tier table above before choosing your route.
Can I lead certification audits after taking this course?
The course can support your development, but it does not appoint you to a certification body or authorise an organisational certification decision. The body must assess the relevant competence and appointment requirements separately.
Can I use what I learn for internal audits?
Yes, the audit methods are relevant to internal AIMS audit work. A specific engagement still requires appropriate competence, objectivity, scope and evidence. Holding a qualification alone does not establish independence for every assignment.
Can I audit an AIMS that I implemented?
Avoid independently evaluating your own work where that would compromise objectivity. An organisation should arrange suitable separation and apply the relevant audit and impartiality requirements. Holding both Implementer and Auditor credentials does not remove that issue.
Can my employer arrange the booking?
Contact Aegentra Academy for employer-funded or group training arrangements and a written proposal where needed. Confirm the learner numbers, delivery format, inclusions and payment arrangements before purchase.
Can I enrol from New Zealand or another country?
Online study is available internationally, subject to the relevant course, exam and service availability. Check your preferred examination language, local scheduling, technical requirements and the final checkout total before enrolling.
Is this the same as certifying my business to ISO 42001?
No. This is professional learning and an individual certification pathway. An organisation's AIMS certification is a separate process conducted through a certification body.
Official sources behind the course facts
Use the linked PECB course information, examination rules and certification requirements to check the official pathway. Course availability and published fees are maintained by Aegentra Academy. A source-link check is not the same as a substantive technical review.
Choose your next step in AI management system auditing
Compare Self-Study and recorded eLearning, check the examination and credential requirements, and choose the learning route that fits your experience. For private training, speak with Aegentra Academy before booking.