— verify Aegentra in the PECB partner directory (opens in a new tab)Official PECB training partner
The PECB ISO/IEC 42001 Lead Auditor course develops the skills to plan, conduct and report audits of an AI management system (AIMS). Study online through Self-Study or recorded eLearning, with optional practical consultancy training.
Draft starting price NZ$1,050.00per learner · Self-Study · before applicable tax
Compare formats & pricesPECB Partner ID 232290 · Verify our listing
Passing the exam does not automatically award the full Lead Auditor credential. PECB assesses your experience and application separately.
Your learning format
Choose reading-led Self-Study or recorded PECB eLearning. The consultancy package adds a separate practical session; it is not a full live PECB course.
PECB describes exam and certification fees as included with its course. Confirm the final NZ package and voucher terms before booking. Read the current exam policy.
All Academy training is online. No physical classroom or onsite Academy training is offered.
At a glance
Sources: PECB course outline, current English exam listing and candidate handbook v1.5. The published teaching agenda is not a promise of self-paced completion in five calendar days. Confirm material-access and voucher dates separately.
Course completion, a personal PECB credential and an organisation’s AIMS certification are separate. Passing the exam lets you apply for a credential; PECB assesses your experience. A certification body makes its own decisions about organisational certification and auditor appointments.
An AIMS audit does not certify individual model outputs or prove that an AI product is bias-free.
Who this course suits best
This is not a model-testing, coding or prompt-engineering course. It concerns auditing the management system around AI.
PECB expects fundamental ISO 42001 and AI knowledge. The ISO 42001 Foundation catalogue entry may be a better starting point if those concepts are new.
For internal audits, assess competence and impartiality before assigning work. A credential does not remove a conflict with an auditor’s own implementation decisions.
What you will learn
Read the management-system boundary and identify the AI activities, responsibilities and requirements that the audit needs to address.
Define objectives, criteria and scope. Plan the team, sampling, interviews and information access, including confidentiality and impartiality.
Follow evidence through documents, interviews and observation. Investigate contradictions and distinguish an unsupported assurance from a substantiated conclusion.
Write findings against criteria, communicate limits and assess corrective-action evidence. Understand how each engagement fits the wider audit programme.
Use this as a view of coverage, not a prediction of difficulty or a personalised study allocation.
PECB’s certification scheme, page 21 publishes these counts. Bar lengths use the full 80-question total; this is a syllabus chart, not a market trend or pass-rate claim.
What an AIMS auditor assesses
These original evidence prompts show how an auditor can connect responsibilities to what happens in practice. They are not a complete statement of ISO 42001 requirements or a ready-made audit plan.
| Area | Evidence to explore | Question to test |
|---|---|---|
| Scope and accountability | AIMS scope, AI inventory, ownership and approvals | Does the stated boundary reflect the AI activities actually performed? |
| Risks and impacts | Risk assessments, impact assessments and treatment decisions | What changed after the assessment, and who accepted the remaining risk? |
| Data and suppliers | Data-use decisions, supplier assessments and agreements | Can the organisation explain the data flow and division of responsibilities? |
| Development and change | Requirements, validation results, release and change records | What evidence supported the decision to use or change this system? |
| Human oversight | Review records, escalation routes and competence evidence | Can reviewers challenge, correct or stop an inappropriate outcome? |
| Monitoring and improvement | Performance reviews, incidents, internal audits and corrective actions | Do issues lead to verified changes, or only closed tickets? |
An AIMS audit is not automatically a technical evaluation of every model, a penetration test or a complete bias assessment. Agree those boundaries and specialist competence needs before fieldwork.
Follow the audit trail
Explore four stages of an original, fictional audit example. This is educational material—not a client case study, PECB exam question or complete audit checklist.
A fictional New Zealand service provider uses AI to draft customer eligibility recommendations. Its own approved procedure requires a trained reviewer to approve each recommendation before it reaches a customer and retain the approval record.
Keep the system boundary, audit scope and audit criteria distinct. A policy statement is a starting point, not proof that the control works.
In a fictional sample of eight issued recommendations, two have no recorded reviewer approval. A manager says every recommendation is checked. That statement does not resolve the inconsistency or establish that a review occurred.
Do not turn missing documentation into an unsupported claim about unsafe AI or discriminatory decisions.
Check the authoritative record, system history and retention rules. Interview the relevant reviewers and confirm which procedure applied at the time. Ask whether approvals could be recorded elsewhere and whether an authorised exception exists.
This step can change the initial conclusion. An auditor needs to consider contradictory evidence, not only evidence that supports a suspected finding.
Assume follow-up confirms that the two required approval records were not retained. A possible finding is that the procedure’s retention requirement was not met for two of the eight sampled recommendations. That is narrower than claiming no human review happened.
Do not assign a major/minor grade from this short example alone. This is original educational material, not a real audit report, exam question or certification decision.
Nothing is submitted, stored or scored. The Algorithm Charter also addresses human oversight for government signatories; this fictional example is not an assessment against that Charter.
Exam and professional certification
The published English assessment is open book, with 80 multiple-choice questions over three hours and a 70% pass mark. Use only permitted references; open book is not unrestricted internet access.
| Credential | Professional experience | Audit activity |
|---|---|---|
| Provisional Auditor | No professional experience required | None |
| Auditor | 2 years overall, including 1 in AI management | 200 hours |
| Lead Auditor | 5 years overall, including 2 in AI management | 300 hours |
| Senior Lead Auditor | 10 years overall, including 7 in AI management | 1,000 hours |
Source: candidate handbook v1.5, page 17. Each tier also requires the applicable exam or accepted equivalent and ethical commitments. PECB decides whether your evidence qualifies.
Relevant activities may include planning, programme management, reporting, working documents, evidence review, audit fieldwork, findings follow-up and team leadership. Keep dates, your role, actual hours and suitable supporting references. Classroom hours and a job title alone do not establish audit experience.
Recording work in the audit experience worksheet does not guarantee that PECB will accept it. Check its certification rules and ongoing maintenance obligations.
PECB’s current exam policy sets a 12-month included cycle from purchase for Self-Study and eLearning, including the first exam, one free retake, the certification application and first-year Annual Maintenance Fee. Its course page still describes a different retake starting point. Confirm the applicable voucher dates in writing before booking.
There is no universal “best” course. This page describes the PECB route; it does not imply equivalence with another issuer’s qualification or automatic appointment to audit for a certification body.
Auditing AI in New Zealand
The audit questions below are Aegentra’s interpretation of the cited guidance, not a claim that a government agency endorses the course.
MBIE’s responsible-AI guidance is voluntary and sits alongside applicable law. A useful audit question is how the organisation turns its AI commitments into assigned responsibilities, evidence and review—not whether it has copied a checklist.
The Privacy Commissioner confirms that the Privacy Act applies to AI and recommends privacy impact assessment before use, with updates as needed. Ask what assessment and follow-up evidence exists within the audit scope. An AIMS audit does not replace a privacy assessment or legal advice.
The Algorithm Charter includes peer review for unintended consequences and clarity about human oversight for its government signatories. The Public Service AI Framework is agency guidance. Public-sector suppliers should establish the actual contract and assurance requirements, rather than assume ISO 42001 is universally required.
Applicable law, sector obligations and contracts need their own assessment. This course or an ISO audit does not establish compliance with the Charter, every law or a tender’s requirements.
Practise documenting the audit trail
Four editable CSV worksheets for learning and scoping. Download directly—no form or sign-up.
Define the objective, boundary, criteria, team and evidence access before fieldwork.
Download audit planning worksheet (CSV)Connect each sample to a criterion and record uncertainty or contradictory evidence.
Download evidence and sampling log (CSV)Separate the requirement, verified gap, corrective action and effectiveness check.
Download finding and follow-up record (CSV)Keep a record of your work and evidence for a future credential application.
Download audit experience log (CSV)Original Aegentra resources, not official PECB forms or a complete ISO checklist. Adapt them to the engagement and protect personal and confidential information. Recording hours does not establish PECB eligibility. No entered data is sent back to this website.
Choose the right pathway
| Pathway | Main learning purpose | Explore |
|---|---|---|
| ISO 42001 Lead Auditor | Evaluate an AIMS through scope, evidence, findings and follow-up. | Compare these audit-course formats |
| ISO 42001 Lead Implementer | Establish, operate and improve the AIMS. | ISO 42001 Lead Implementer |
| ISO 42001 Foundation | Develop introductory AIMS knowledge before a specialist pathway. | Foundation in the catalogue |
| ISO 27001 Lead Auditor | Audit an information security management system (ISMS). | ISO 27001 Lead Auditor |
AIMS and ISMS audit skills can complement one another, but information security and AI governance are not interchangeable scopes. For an actual organisational audit rather than individual training, discuss your audit requirement.
Separate exam preparation
Practise interpreting scenarios, test your reasoning and learn from explanations. Labs questions are independently authored, not official PECB exam questions or exam dumps.
Optional access is NZ$120.00 for 12 months, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course.
Explore ISO 42001 Lead Auditor practiceCheck completeness and reliability of the records, interview the responsible people and investigate authorised exceptions or alternative evidence. A missing record may support a finding against a recording requirement after verification; it does not by itself prove that nobody reviewed the decision.
Do not assume independence from the job title or credential. Assess objectivity, impartiality and conflicts before assigning the audit. A person explaining their implementation can provide evidence, but that is not the same responsibility as independently evaluating it.
No. A personal exam, a PECB credential and a certification body’s appointment are separate matters. An organisation’s certification decision belongs to the certification body, following its scoped process.
These examples are freely readable here and do not represent the PECB exam. They do not award CPD, certification or a predicted pass result.
Before you decide
The draft shows NZ$1,050.00 per learner for Self-Study and NZ$1,053.86 for recorded PECB eLearning, before applicable tax. The course-plus-two-hour consultancy package is quoted separately. Bookings are not open.
Yes. Add optional Aegentra Labs for NZ$120.00 for 12 months to either format. The combined draft total is NZ$1,170.00 with Self-Study or NZ$1,173.86 with eLearning, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course. Labs is independently authored practice, not official PECB exam content.
Choose for the role and the requirements of your employer, client or certification body. Compare the issuer, assessment, experience rules and maintenance obligations. A course-completion certificate and an auditor personnel credential are different outcomes; no single route is best for everybody.
Prepare for and pass the applicable exam, then apply to PECB with evidence for the credential tier you meet. The full Lead Auditor tier requires five years of professional experience, including two in AI management, and 300 audit hours. PECB assesses the application; passing the exam is not automatic certification.
PECB expects a fundamental understanding of ISO/IEC 42001 and AI principles and concepts. That entry knowledge is separate from the experience required for professional credential tiers. If you are new to management systems, consider Foundation first.
The published English exam has 80 multiple-choice questions over three hours, is open book and has a 70% pass mark. Only permitted references may be used; open book is not unrestricted internet access. Confirm the assigned exam instructions before your sitting.
PECB’s current exam policy sets a 12-month included cycle from purchase for Self-Study and eLearning, including the first exam, one free retake, the certification application and first-year Annual Maintenance Fee. Its course page still describes a different retake starting point. Confirm the applicable voucher dates in writing before booking.
PECB’s taught-course agenda covers four training days and an exam on Day 5. Self-Study and recorded eLearning are self-paced; no 30–40-hour completion target is promised here. Confirm material-access dates separately from the exam voucher cycle before booking.
Not automatically. A certification body separately assesses competence, relevant experience, impartiality and suitability for its assignments. A personal credential is not an appointment to conduct certification audits.
Yes. Audit planning, evidence evaluation, findings and follow-up are relevant to internal audit work. The organisation must still appoint competent, objective and impartial auditors; a credential does not remove a conflict with someone’s own implementation work.
No. An organisation’s AIMS certification concerns a defined management-system scope, not a guarantee about every model output or AI product. A personal course or credential is separate again. Neither automatically establishes legal compliance or tender acceptance.
Do not assume a universal certification requirement. MBIE’s responsible-AI guidance is voluntary; applicable laws, contracts and sector requirements still need separate assessment. A buyer may require particular assurance. Check the actual requirement rather than treating this course or an audit as a substitute.
Self-Study and recorded eLearning are online, self-paced formats in English. The separate consultancy package is arranged by enquiry, with the date, NZST or NZDT time, consultant and focus confirmed before booking. Aegentra Academy does not offer physical classroom or onsite training.
No. The quoted package combines the chosen PECB course with two practical hours with a consultant who has implementation and auditing experience. It is not the complete live course, an audit engagement or a substitute for the exam.
Check the particular employer, client or certification body’s acceptance requirements. This page describes a PECB professional certification pathway, not an NZQA-approved programme or a claimed NZ qualifications-framework level. It is not an automatic professional licence.
The original example, discussion questions and editable worksheets on this page are free learning resources. They do not include the paid PECB course, official exam or credential. Check Aegentra Labs for its current practice options; a practice score is not an official exam result.
Employer invoicing, tax treatment and the final amount payable must be confirmed before NZ bookings open. No tax exemption or no-GST claim is made in this preview. Confirm the learner, payer, currency, inclusions and deadlines in writing.
Last updated . Public source facts checked for this draft; final NZ commercial terms and human publication review remain pending.
Compare Academy courses or discuss course suitability and consultancy training.