ISO/IEC 27001 Foundation Training – PECB Certification

Over two days this course lays the groundwork for information security management under ISO/IEC 27001:2022: the vocabulary, the principles, the requirements of an information security management system (ISMS) and the main ways organizations put one in place. It ends with the PECB exam, which awards the Certificate Holder in ISO/IEC 27001 Foundation credential. It is the natural starting point before a Lead Implementer or Lead Auditor track, and a solid way for non-specialists to understand what an ISO 27001 project actually involves.

The essentials

Objectives

Program

  1. Day 1 – ISMS concepts and ISO/IEC 27001:2022
    • The ISO/IEC 27000 family and the regulatory context
    • Key notions: information, asset, threat, vulnerability, risk
    • Management system principles
    • Annex A security controls
  2. Day 2 – ISMS requirements and exam
    • Context, leadership and planning
    • Support, operation and performance evaluation
    • Continual improvement
    • PECB certification exam

Prerequisites

Target audience

The exam

The PECB ISO/IEC 27001 Foundation exam takes place on day two. It covers two competency domains: the fundamental principles and concepts of information security management, and the ISMS requirements. Review quizzes run throughout the course to get you ready. No professional experience is required: you attend the training, pass the exam and sign the PECB Code of Ethics to become a Certificate Holder. Exam and certification fees are included, and PECB allows one free retake within 12 months if you do not pass.

Preparation tips

Frequently asked questions (FAQ)

What is the difference between ISO 27001 Foundation and Lead Implementer?

Foundation gives you the big picture in two days. Lead Implementer, over five days, trains you to actually run an ISMS project. Many participants start with Foundation and then move on to one of the two Lead tracks once they know which role suits them.

Do I need prior experience?

No. This entry-level credential has no prerequisites and requires no professional experience. General IT or business awareness is enough to keep up, and the course explains every concept from scratch.

Is the exam included in the price?

Yes. Exam and certification fees are included, with one free retake within 12 months if needed.

Is the course based on the 2022 version of the standard?

Yes. The PECB content is built on ISO/IEC 27001:2022 and its reorganized set of security controls. Where it helps, the trainer points out what changed compared with the 2013 edition.

How is the course delivered?

Live online, in person in Casablanca or on-site at your organization, in French or English. You receive PECB courseware of more than 200 pages.

Related trainings

Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.

Related trainings