Source-backed study plans

Prepare the role, not just the terminology.

Four focused guides turn published competency domains into implementation and audit decisions. Each guide has a compact summary, an original scenario, a study plan, optional career extensions and direct links to the exact exam guide and free questions.

Choose by responsibility

Implementation and audit are different jobs.

Start with the role you are preparing to perform. The standard may be the same, but the decisions, evidence and professional boundaries are not.

Build and operate

Lead Implementer

Prepare to define scope, assess risk, select controls and prove the management system works.

ISO/IEC 27001

ISO 27001 Lead Implementer study plan

A practical ISO 27001 Lead Implementer study plan for scope, risk treatment, the Statement of Applicability, operating evidence and exam-day decisions.

Decision focus: Turn the clauses into an implementation decision trail you can apply under exam conditions.
Reading time: 11 minute guide

Preview the decision map

Context and scopeWho, what, where and which dependencies belong inside the ISMS.
Risk and treatmentRisk criteria, assessment, owners, treatment options and residual-risk acceptance.
Statement of ApplicabilityWhy each necessary control is included, implemented or justifiably excluded.
Operating evidenceRecords that prove the planned process actually ran and was reviewed.

Read the ISO/IEC 27001 Lead Implementer guide

ISO/IEC 42001

ISO 42001 Lead Implementer study plan

Prepare for the ISO 42001 Lead Implementer exam through AIMS scope, AI risk and impact assessment, lifecycle controls, evidence and improvement decisions.

Decision focus: Map management-system decisions to real AI lifecycle evidence without collapsing risk and impact into one exercise.
Reading time: 12 minute guide

Preview the decision map

AI system contextPurpose, stakeholders, deployment setting, lifecycle stage and external dependencies.
Risk and impactOrganisational uncertainty considered separately from effects on individuals, groups and society.
Lifecycle controlsData, development, validation, deployment, monitoring, change and retirement responsibilities.
Governance evidenceInventories, approvals, logs, monitoring records, incidents, reviews and improvement actions.

Read the ISO/IEC 42001 Lead Implementer guide

Test and report

Lead Auditor

Prepare to plan the audit, sample evidence, evaluate conformity and report defensible findings.

ISO/IEC 27001

ISO 27001 Lead Auditor study guide

Prepare for the ISO 27001 Lead Auditor exam through audit planning, evidence sampling, interviews, findings, reporting and audit-program decisions.

Decision focus: Build a repeatable audit-evidence method and keep audit work separate from implementation advice.
Reading time: 10 minute guide

Preview the decision map

Objectives and criteriaWhy the audit exists and the requirements evidence will be evaluated against.
Risk-based samplingWhere limited audit time should be concentrated and how the sample is justified.
Corroborated evidenceDocuments, interviews, observation and records tested together rather than accepted alone.
Finding and closureClear criteria, evidence and conclusion followed by agreed reporting and follow-up.

Read the ISO/IEC 27001 Lead Auditor guide

ISO/IEC 42001

ISO 42001 Lead Auditor study guide

Prepare for the ISO 42001 Lead Auditor exam through AI-specific audit planning, lifecycle evidence, impact assessment, sampling, findings and reporting.

Decision focus: Audit whether AI governance operates across the lifecycle rather than accepting policies or model documents at face value.
Reading time: 11 minute guide

Preview the decision map

Audit boundariesAIMS scope, AI systems, lifecycle stages, locations, providers and audit criteria.
AI-specific sampleHigh-impact uses, material changes, incidents, data dependencies and outsourced activities.
Evidence trailPurpose and impact decisions traced into controls, operation, monitoring and review.
Impartial conclusionFindings supported by sufficient evidence without prescribing the technical fix.

Read the ISO/IEC 42001 Lead Auditor guide

Editorial boundary

Useful preparation without invented pass rates or job promises.

The guides use ISO, PECB, NIST, ISACA and ISC2 primary sources. Career options are described as separate pathways with their own requirements. They are not guarantees, prerequisites or substitutes for official scheme information.