Exam Format

• Exam Code: ISO-27019-LA
  
• Certification Level: Lead Auditor
  
• Exam Duration: 60 minutes
  
• Passing Score: 70%
  
• Unscored Content: The exam does not officially mention unscored questions. All scored questions contribute toward the final result.

Exam Details

• Question Types: Multiple choice questions
  
• Number of Questions: 50 multiple-choice questions
  
• Hands-On Questions: The exam does not include hands-on lab questions. It assesses conceptual, auditing, and practical understanding of ISO 27019:2017 information security controls for energy utility process control systems.

Exam Policies

• Offline Proctoring: Availability may vary by training provider and exam partner. Candidates should confirm scheduling, cancellation, and rescheduling rules with the authorized provider before booking.
  
• Online Proctoring: The exam is delivered online in a proctored mode through ProctorU with a webcam and reliable internet connection.
  
• Waiting Period: The exam voucher is valid for two attempts. If both attempts are unsuccessful, a new voucher must be purchased for additional attempts.
  
• Retake Fee: A new exam voucher must be purchased if the included attempts are used and the candidate does not pass.

Certification Validity and Renewal

• Validity: Lifetime
  
• Renewal Options: No renewal is required for this certification. However, professionals are encouraged to stay updated with ISO/IEC 27019 revisions, ISO/IEC 27001, ISO/IEC 27002, energy sector cybersecurity practices, and audit methods.

Exam Fee

• Base Fee: $190 USD excluding taxes
  
• Taxes: Country-specific VAT/GST may apply. Example: In India, 18% tax applies, making the total $224.20 USD ($190 + $34.20 tax).

Prerequisites

There are no mandatory prerequisites for taking the ISO27019LA exam. However, it is recommended to have:

• Basic knowledge of ISO/IEC 27019
  
• Understanding of ISO/IEC 27001 and ISO/IEC 27002
  
• Awareness of information security controls for energy utilities
  
• Knowledge of process control systems and operational technology environments
  
• Experience in information security, energy sector operations, compliance, audit, cybersecurity, or risk management

Exam Topics

• Foundation: Overview of ISO/IEC 27019, purpose, scope, terminology, and relationship with ISO/IEC 27001 and ISO/IEC 27002
  
• Information Security Policies: Security policies, management direction, energy utility security requirements, and documentation expectations
  
• Organization of Information Security: Roles, responsibilities, segregation of duties, governance, and coordination for process control security
  
• Human Resource Security: Security awareness, responsibilities, training, and personnel controls for energy utility environments
  
• Asset Management: Identification, classification, ownership, handling, and protection of process control and information assets
  
• Access Control: User access management, privileged access, authentication, authorization, and access restrictions for control systems
  
• Cryptography: Cryptographic controls, key management, secure communication, and protection of sensitive energy sector information
  
• Physical and Environmental Security: Protection of control rooms, substations, sites, equipment, and environmental security measures
  
• Operations Security: Change management, malware protection, backups, logging, monitoring, vulnerability management, and operational procedures
  
• Communications Security: Network security, segmentation, remote access, telemetry, data exchange, and secure communication channels
  
• System Acquisition, Development and Maintenance: Security requirements, testing, change control, secure development, and supplier-related system changes
  
• Supplier Relationships: Supplier risk, third-party access, contracts, service monitoring, and outsourced process control security responsibilities
  

Intended Audience

The ISO 27019:2017 Certified Lead Auditor certification is ideal for professionals involved in information security, energy utility cybersecurity, and auditing, including roles such as:

• Lead Auditor
  
• Internal Auditor
  
• Information Security Manager
  
• Energy Sector Cybersecurity Professional
  
• OT Security Specialist
• Compliance Manager
  
• Risk Manager
  
• ISMS Consultant
  
• Process Control Security Engineer
• Governance and Assurance Professional

Career Impact

 Jobs You Can Get:

• Lead Auditor, ISMS Auditor, OT Security Auditor, Energy Sector Cybersecurity Specialist, Information Security Manager, Compliance Manager, Risk Manager, Process Control Security Consultant, etc.

Average Salary:

• Varies by country — U.S.: $85,000–$140,000 USD,
• India: ₹8,00,000–₹24,00,000 INR,
• United Kingdom: £45,000–£85,000 GBP,
• UAE: 170,000–320,000 AED per year.

Why It’s Valuable:

• Valuable for professionals auditing information security controls in energy utility environments, process control systems, operational technology, critical infrastructure, regulatory compliance, and ISO 27001-aligned security management.

Exam Mode

The exam is proctored and can be taken:

• Online through ProctorU or the authorized exam delivery platform
  
• Through authorized training providers where classroom or virtual training with exam access is available

Exam Booking Link

• Book your ISO27019LA Exam via GAQM — Click here
  https://gaqm.org/certifications/iso_certifications/iso-27019-la

Once you pass the exam

• Download your ISO 27019:2017 Certified Lead Auditor certificate from the certification provider’s candidate portal
  
• Processing Time: Certificate availability depends on the provider and may vary after passing the exam
  
• Log in to your candidate account
  
• Navigate to the Certification or My Certificates section
  
• Download your certificate in digital format

Offers