ISO/IEC 27001 Lead Auditor & Implementer Practice Guide by Kai London
This practice guide takes you through the knowledge ISO/IEC 27001 lead auditor and implementer certification expects, area by area, in clear language — with worked examples, exam tips and practice questions so you can check your progress as you go.
What the book covers
The standard in practice
Clauses 4 to 10 explained with worked examples.
Annex A controls
The 2022 control set, how to apply it and the Statement of Applicability.
Risk assessment
Methods that produce defensible risk treatment decisions.
Implementation roadmap
Planning, documentation and embedding the ISMS.
Audit technique
Planning, sampling, interviewing and writing findings.
Practice and review
End-of-chapter questions with explanations, plus a final review checklist.
This is an independent study aid. It is not affiliated with, sponsored or endorsed by ISO, IEC or any certification body; exam names are trademarks of their owners. Always check the current official exam outline.
Who it is for
ISMS implementers, internal and external auditors, compliance managers and candidates for lead implementer or lead auditor certification.
About the author
Professor Kai London — CISSP, CISM.
An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.