What is an IRCA Lead Auditor course?
It is an audit course certified by the CQI and IRCA that teaches participants to lead a management system audit and an audit team, from preparation to report. The programme, the assessment and the certificate follow the body’s rules, not the trainer’s.
The CQI (Chartered Quality Institute) is the UK professional body for quality professionals. IRCA (International Register of Certificated Auditors) is its auditor register. Together, they run two activities that you should keep apart from the start:
- certifying courses: a training provider has its course recognised by the CQI/IRCA, which governs its content and how participants are assessed;
- certifying auditors: an individual applies to be listed on the IRCA register, at a given grade, by proving their training and audit experience.
The detailed conditions are specific to each scheme and grade; for auditors, the CQI publishes them on its IRCA grades page.
The Lead Auditor title refers to the person who leads the audit team. Their reference method is ISO 19011, the guidelines for auditing management systems. According to the ISO page for the standard, the fourth edition, ISO 19011:2026, was published on 27 May 2026 and replaces the 2018 edition, which is withdrawn. It is aimed at auditors who conduct first-, second- or third-party audits, and it provides a framework for auditor competence and evaluation.
That three-party distinction shapes everything else: who requires what, and for which career.
Type of audit | Who audits whom | Training required of the audit leader | Where it is written |
|---|---|---|---|
First party (internal audit) | The organisation audits its own system | ISO 9001 imposes no diploma: the organisation demonstrates its auditors’ competence | The audited standard |
First party, FSSC 22000 multi-site organisation | The central function audits its sites (categories BIII, E, F and G) | 40-hour FSMS, QMS or FSSC 22000 Lead Auditor course | FSSC 22000 v7 scheme, Part 2, 2.5.18.2 |
Second party (supplier audit) | A customer or a group audits its suppliers | Set by the buyer or the group; ISO 19011 provides the method | The buyer’s specifications |
Third party (certification) | A certification body audits in order to issue a certificate | The body’s criteria; for FSSC 22000 v7, a Lead Auditor course of at least 40 hours with an exam, recognised by a competent body such as the CQI/IRCA | FSSC 22000 v7 scheme, Part 4, 3.5.1 |
The difference from internal auditor training lies in the role. An internal auditor checks the system of their own organisation. A Lead Auditor plans an audit, allocates the work of a team, runs the meetings, decides on findings and signs the conclusions, often at a third party that has no reason to make the job easier. The first case is covered in our guide to ISO 9001 internal auditor training.
Which standards do CQI/IRCA-certified Lead Auditor courses cover?
At least four management systems: quality (QMS), environment (EMS), occupational health and safety (OHSMS) and food safety (FSMS). You choose the standard you are going to audit, in its current edition.
Field | Standard and current edition | Point to watch in 2026-2027 | Typical participants |
|---|---|---|---|
Quality (QMS) | ISO 9001:2026, published on 16 September 2026 | Transition until 30 September 2029: check that the course covers the 2026 edition | Quality managers, buyers, supplier auditors |
Environment (EMS) | ISO 14001:2026, published in April 2026 | Transition until 30 April 2029: same check | Environmental and QHSE managers in industry and energy |
Occupational health and safety (OHSMS) | ISO 45001:2018 | Revision expected in 2027 | HSE managers in industry, construction and logistics |
Food safety (FSMS) | ISO 22000:2018 (2024 amendment, revision under way); FSSC 22000 Version 7 | FSSC v7 upgrade audits from 1 May 2027 to 30 April 2028 | Quality managers in food, packaging and warehousing |
Other fields exist, such as medical devices. The edition of the standard covered is checked course by course, with the training provider, before enrolling.
Three typical situations illustrate the choice. The quality manager of a cable maker in Kenitra that exports to Europe must audit its copper and insulation suppliers: the quality course is the natural fit. The quality manager of a fish cannery in Agadir runs an FSSC 22000 system: the food safety course speaks more directly to their work. The HSE manager of a construction company with sites in Senegal or Côte d’Ivoire audits subcontractors: ISO 45001:2018 is their standard.
For an integrated quality, health and safety and environment system, there is no shortcut: a Lead Auditor course covers one standard. Start with the one that carries the most customer or regulatory stakes, then add the other standards without repeating the method. Our page on the integrated QHSE management system describes the combined audit that follows.
On the food safety side, one detail matters: FSSC 22000 Version 7 accepts an FSMS or QMS Lead Auditor course for its auditors, but then requires at least 8 hours of training on ISO 22000 if the course does not cover it. The other Version 7 changes are presented in our article on FSSC 22000 Version 7 changes.
How does a Lead Auditor course work?
Over about forty hours, in practice a week of training, alternating input, case studies, audit role-plays and teamwork, with continuous assessment and a final exam. The 40-hour duration is the minimum that FSSC 22000, for example, sets for its auditors’ Lead Auditor course.
A Lead Auditor course does not teach the standard from scratch. It assumes that participants already know its requirements and teaches them to audit those requirements. A participant who discovers the standard during the course spends the week reading it instead of learning to audit it, and reaches the exam behind schedule. Preparation is covered in our article on Lead Auditor exam preparation. Ask the training provider in writing for the prerequisites of the certified course.
The typical content follows the course of an audit as ISO 19011 describes it:
Module | What the participant learns to do |
|---|---|
Audit principles | Apply professional ethics, impartiality, the evidence-based approach and the risk-based approach |
Requirements seen by the auditor | Turn a requirement of the standard into audit questions and expected evidence |
Programme and preparation | Set the audit objectives, scope and criteria; write a plan; allocate the team |
Conducting the audit | Run the opening meeting, interviews, observation and sampling of records |
Findings | Write a nonconformity with the requirement, the observation and the evidence; assess its severity |
Closing and report | Present the conclusions at the closing meeting; write a defensible report |
Follow-up | Assess corrective actions and their effectiveness |
Certification framework | Understand the role of certification and accreditation bodies |
For certification body auditors, FSSC 22000 Version 7 specifies that the course must include ISO 19011 and the elements of ISO/IEC 17021-1 related to the audit process, ISO/IEC 17021-1 being the requirements standard for certification bodies.
What exam, and what does the participant receive?
The participant is assessed under CQI/IRCA rules, during the course and through a final written exam. A participant who passes both receives a course pass certificate. FSSC 22000 Version 7 does require a course passed with an exam: an attendance certificate alone is not enough.
Before enrolling, ask the training provider for the duration, format and pass mark of the exam and the resit rules, and check on the CQI website how long the course certificate remains valid for an application to the IRCA register.
Course certification or auditor certification: what is the difference?
The certified course proves training; IRCA certification proves an auditor’s professional status. The two are often confused on CVs, yet a passed course does not, on its own, allow anyone to present themselves as an IRCA-certified auditor.
CQI/IRCA-certified course | IRCA-certified auditor | |
|---|---|---|
What is certified | A training provider’s course | The person |
What is assessed | The participant’s learning, through continuous assessment and the exam | Passed training and audit experience, depending on the grade applied for |
What you obtain | A course pass certificate | Listing on the IRCA register at a grade |
Over time | Training passed on a given date | A status to maintain under IRCA rules |
Useful for | Proving required training, for example under FSSC 22000 | Proving auditor status to an employer or a customer |
The CQI describes four IRCA grades: Associate Auditor, Auditor, Lead Auditor and Principal Auditor. Each has its own training and audit experience criteria and its own recertification conditions, published on the IRCA grades page.
For a third-party auditing career, a third level is added: qualification by the certification body itself. FSSC 22000 Version 7 illustrates it well. The Lead Auditor course is only one of the required trainings, alongside 16 hours of HACCP training, ISO 22000 (8 hours if the course does not cover it), food defense and food fraud (2 hours each), the scheme requirements, the Foundation’s mandatory training and 3 hours on ISO 22002-100. To these are added two years of full-time experience in food safety roles, of which no more than six months may be consulting experience, a degree in a food-related discipline or the biosciences, then at least ten audit days, including five third-party certification audits, two supervised FSSC 22000 audits and one witnessed audit. Finally, the certification body submits the auditor’s profile to the Foundation for pre-approval.
In other words, the course opens a door; it does not make an auditor. Supervised audit practice after the course is what makes the difference.
How do you choose a certified course in Morocco or elsewhere in Africa?
By checking the course’s status and content before comparing prices. A “Lead Auditor-type” course, or one “in line with IRCA requirements”, is not necessarily a certified course, and only the CQI can confirm it.
Questions to put in writing to the training provider:
Three formats coexist: the public session open to several companies, the in-company session for a group of auditors from the same company, and the virtual classroom. For a professional based in Dakar, Abidjan or Douala, the virtual classroom avoids travel, provided the format is covered and the exam is taken under conditions accepted by the CQI/IRCA. Cost factors are detailed in our article on Lead Auditor course cost.
How can a Moroccan employer fund the course through CSF?
By including it in the company’s training plan before it takes place. OFPPT, the Office de la formation professionnelle et de la promotion du travail (Morocco’s vocational training office), runs special training contracts (contrats spéciaux de formation, CSF) that reimburse a company for part of the cost of its employees’ continuing training. Reference rules: 70% for planned training delivered by an external provider, 40% for unplanned training, within a ceiling calculated on the declared vocational training tax (taxe de formation professionnelle, TFP). These rules are those of the CSF procedures manual of May 2006 and its Amendment No. 2 of 2 June 2014; any resulting amount is indicative, before ceilings, with no commitment.
A professional who pays for their own course is not covered: the scheme is aimed at companies and their employees. ACG is CSF-eligible; we simulate the reimbursement on your figures, without promising an amount. See our page on CSF and OFPPT funding.
What careers does a Lead Auditor course open up?
Four uses, from the most common to the most demanding: leading supplier audits, running a multi-site internal audit programme, auditing for a certification body, or advising and auditing on behalf of companies.
- Leading second-party audits. Industrial groups, retailers and exporters qualify their suppliers through audits. A QHSE manager trained in the Lead Auditor role conducts these audits on behalf of their company, with a method the supplier recognises. Our case study of a QHSE manager who became a second-party Lead Auditor follows this path step by step, and our supplier audit guide for EU and UK buyers sets out what European buyers expect.
- Running a group’s internal audit programme. In a multi-site organisation certified to FSSC 22000, the person in charge of internal audit must have completed a 40-hour Lead Auditor course, and the other auditors in the team a 16-hour internal auditor course.
- Auditing for a certification body. This is the most selective path: training, experience, supervised audits and qualification by the body, as the FSSC 22000 example shows.
- Advising and auditing on behalf of companies. Outsourced internal audits, mock audits, supplier audits: Lead Auditor training is a foundation of credibility, which experience then completes.
The needs go beyond Morocco. Moroccan groups with subsidiaries in West Africa audit their sites and suppliers there, and European buyers qualify suppliers across the region. The 2026 and 2027 requirements that weigh on auditors are summarised in our article on Lead Auditor requirements for 2027.