CQI IRCA QMS Lead Auditor Certification Path 2026: Course, Exam, Audit Log, and Grades

Passing a CQI and IRCA Certified QMS Auditor/Lead Auditor course is an important professional milestone, but it does not automatically make you an IRCA-certificated Lead Auditor. The course establishes the training component. IRCA certification is a separate application in which your chosen grade is determined by acceptable audit experience completed after the training. This distinction matters before you pay for a course, describe yourself on a résumé, or begin collecting audit days.

This 2026 guide connects the pieces that provider landing pages often separate: selecting an approved PR328 course, completing the assessment, preserving the right certificate, choosing an IRCA grade, building a defensible audit log, and applying. Official CQI and IRCA pages were checked on July 21, 2026. Course schedules, prices, assessment delivery, application fees, and administrative instructions can change, so verify them with CQI/IRCA and your Approved Training Partner before acting.

The short answer: course completion and IRCA certification are different outputs

The official QMS Auditor/Lead Auditor course page identifies the course as PR328, gives an indicative duration of 40 hours, and says successful completion is required for certification as an Auditor on the IRCA QMS Scheme. The careful word is required. Training is one requirement; it is not the entire certification decision.

Use this four-level map:

The course title contains “Lead Auditor” because it teaches the competence to plan, conduct, lead, report, and follow up management-system audits. Your IRCA membership grade, however, reflects verified post-course auditing experience. That is why one learner may pass the same course and apply as Associate Auditor while another experienced candidate later applies directly for Lead Auditor.

Step 1: verify the exact course before paying

Start in the official CQI and IRCA course directory. Search the auditing topic for the QMS Auditor/Lead Auditor course, then verify the provider, delivery method, country, and unique course reference. A business calling its class “ISO 9001 lead auditor training” is not enough; the course you rely on for IRCA certification must be traceable as current IRCA Certified Training.

Ask the provider to confirm these points in writing:

1. Is this the current QMS Auditor/Lead Auditor course aligned with PR328 and ISO 9001:2015?
2. What is the provider's Approved Training Partner identity and the unique course reference?
3. Does the price include tuition, official assessment, the first assessment attempt, taxes, and any resit charge?
4. Is the assessment online through SARAS or delivered under another CQI/IRCA-approved arrangement for the course language?
5. What attendance, continuous-assessment, identification, technology, and successful-completion conditions apply?
6. Which document is issued after success, and when will the provider release it?
7. What cancellation, transfer, accommodation, and technical-failure policies apply?

Fees are provider-specific. A high tuition price does not prove approval, and a low price does not reveal whether the examination, standards, or resit is included. IRCA application and annual membership fees are also separate from course tuition and vary by country. Compare the full path cost, not just the advertised classroom price.

Step 2: know which training level matches your target

PR328 is designed for people who intend to audit an ISO 9001-based management system as a second- or third-party auditor. It can also support people who conduct full-system internal audits, but it is broader than a basic internal-auditor course. If your only goal is short partial-system audits inside your own organisation, compare the QMS Internal Auditor route before committing to the professional-level Lead Auditor course.

Before PR328, you should already understand ISO 9001 structure, the process approach, quality management principles, risk-based thinking, PDCA, and the relationship between requirements and objective evidence. A provider may describe this as prior knowledge rather than a formal credential. Request its prerequisite statement and honestly assess whether you can interpret clauses 4–10 before an intensive audit simulation begins.

free CQI IRCA QMS Lead Auditor practice testPractice questions with detailed explanations

Step 3: complete the course and assessment, then preserve the correct evidence

CQI/IRCA's current online exams overview lists QMS ISO 9001:2015 Lead Auditor examinations online in supported languages. These exams are on demand and remotely proctored using a webcam, microphone, screen sharing, and a stable connection. Courses in unsupported languages may continue with paper-based assessment, so your Approved Training Partner's instructions control your cohort.

For the current online route, the learner guide describes a 40-question Lead Auditor examination lasting 1 hour 45 minutes. The public PR328 page still refers to a two-hour written examination. Treat this as a delivery distinction to clarify with the provider, not permission to choose whichever timing you prefer. Use the duration and rules shown in your official exam invitation.

CQI's online-exam help page says the SARAS schedule provides 30 days in which to take the exam. Test the camera, microphone, browser permissions, screen sharing, display resolution, and connection before starting. If access details are missing or identify the wrong exam, contact the training provider; the provider uploads learner details and handles the correction.

After the examination, CQI reviews the proctoring record. Its exam-results page says results are normally available for the training provider to download within 10 UK working days when no proctoring issue is found. If no result arrives within 14 UK working days, follow up with the provider. One resit is allowed, and the provider must request it within 12 months of the first-attempt result issue date.

Most importantly, preserve evidence of successful completion. IRCA's application FAQ explicitly says a certificate of attendance is not accepted as evidence of completing training. Check your name, course title, scheme, dates, provider, reference, and outcome on the document. Save the original digital file, a backed-up copy, and the provider's contact details.

Step 4: choose the grade your evidence supports

The official IRCA grades page separates Associate Auditor, Internal Auditor, Auditor, Lead Auditor, and Principal Auditor. For a new PR328 completer, the first four are the practical decision set. The figures below are minimums, not promises of approval.

The official Lead Auditor grade page expresses the direct total as seven audits, 35 audit days, and 25 on-site days, including at least three audits led with a team consisting of you and at least one other auditor. A sole audit is not a led-team audit merely because you managed yourself.

You do not have to buy the course again merely because you cannot meet the Lead Auditor audit total immediately. The Associate Auditor page provides a route onto the IRCA register after successful relevant training without an audit requirement. You can later apply to regrade when your records support another grade. IRCA also says you may apply directly for the grade you meet; you do not have to progress through every lower grade first.

Step 5: build an audit log that IRCA can verify

Start the log with your first eligible audit after successful course completion. Do not wait until the fifth year and reconstruct dates from memory. IRCA's rules say audits normally must occur after the relevant certified training and within five years before the certification application. Older training may receive individual consideration with recent CPD, work experience, and evidence that auditing skills remain current, but that is not a planning strategy.

For each audit, record:

• the audited standard and QMS scheme allocation;
• audit start and end dates;
• your audit duration and your on-site days, not the combined time of the whole team;
• organisation, industry, size, audit scope, and whether it was full or partial system;
• first-party, second-party, third-party, or qualifying consultancy context;
• your role as trainee, internal auditor, auditor, sole auditor, or lead auditor;
• the team size; and
• a referee's name, role, email, phone, and certification number when applicable.

IRCA's online audit-log guidance says integrated-audit days are divided equally among the standards audited. If you spend four days on an integrated ISO 9001 and ISO 14001 audit, do not automatically claim four QMS days. The allocation rule can materially change when you reach the QMS threshold.

Keep supporting records such as audit plans, agendas, reports, attendance or time records, team assignments, and referee confirmations. Protect client confidentiality and follow your employer's document-control rules; the goal is verifiability, not copying confidential evidence into a personal cloud account. Ask permission before retaining client material, and use a redacted verification record when appropriate.

Which audits count—and which commonly fail the test?

The audit must be conducted under ISO 19011 or ISO/IEC 17021 guidance against the relevant scheme standard or an accepted alternative. IRCA accepts remote audit activity as a substitute for on-site days when interaction with the auditee is comparable to on-site auditing. Record what you actually did through video, interviews, document sharing, and process sampling rather than labelling desk review as “on-site.”

Internal audits may support Auditor or Lead Auditor applications when they cover the full management system and you are entirely independent of the audited part, such as a separate business unit. IRCA may request an organisation chart, sample audit report, and other evidence. Auditing a procedure you own or work you perform creates an independence problem even if your employer calls it an internal audit.

Consultancy audits can count when the client already had a fully established system, you did not help set up the system being audited, and the audit scope included all system elements. Surveillance or partial-system audits may be accepted, but you must still satisfy the grade's overall full-system and audit-cycle requirements. Do not assume a collection of short follow-up visits becomes a full audit when added together.

IRCA says it will not accept audits of the same management system occurring more often than once every 12 months, audits shorter than one day or six audit hours except under the Internal Auditor rule, or gap analyses, close-out visits, and follow-up visits. An activity can be valuable professional work without qualifying toward the grade minimum. Classify it before promising yourself that it counts.

Step 6: apply with the right file and budget

When your chosen grade requirements are met, complete the online IRCA application with training details, the audit log, requested supporting evidence, a CPD plan, and the declaration of good standing. Use referees who can respond and verify your actual participation, dates, role, and team leadership. Tell them to expect contact and check every email address before submitting.

IRCA's country-based fee page explains that a new applicant pays a one-off application fee and an annual membership fee. Annual fees are charged for each scheme held. Regrading later does not add another membership fee for the same scheme, but a processing fee applies. Because figures differ by country, use the live country selector instead of an old provider quote.

Approval, grade establishment, fee payment, register entry, and the IRCA card are the certification outcome. Until that process is complete, describe yourself precisely: for example, “successfully completed a CQI and IRCA Certified QMS Auditor/Lead Auditor course,” not “IRCA Certified Lead Auditor.” Accurate wording protects both professional credibility and employer expectations.

A practical 2026 pathway

Use this sequence to avoid dead ends:

1. Define whether you need audit competence, an IRCA register entry, or a particular grade for a role.
2. Verify a current PR328 offering in CQI/IRCA's directory and obtain all provider terms in writing.
3. Close ISO 9001 foundation gaps before the intensive course.
4. Complete attendance, course activities, and the official assessment; save successful-completion evidence.
5. Apply as Associate Auditor now if useful, or begin a contemporaneous audit log for another grade.
6. Screen every proposed audit for timing, independence, scope, audit-cycle coverage, duration, standard, role, and referee.
7. Apply directly for the grade your evidence supports before the normal five-year windows close.
8. Maintain fees, CPD, audit evidence, and recertification records after approval.

CQI IRCA QMS study guideFree exam prep with practice questions & AI tutor

The most valuable planning move is made before the first post-course audit: decide which grade you are building toward and capture evidence while a referee can still verify it. A course certificate proves successful training. A defensible audit history, IRCA evaluation, and current membership establish the professional grade.