ISO/IEC 27001 Foundation

Every organization holds information it needs to protect, such as customer records, payment details, employee files and business plans. When this information is stolen, changed or lost, customers and the business can be harmed.

ISO/IEC 27001 is the international standard for managing information security. It sets out how an organization finds the risks to its information and chooses safeguards, called controls, to reduce them. The organization then checks and improves its approach over time. This way of working is called an information security management system, or ISMS.

The PECB ISO/IEC 27001 Foundation training course introduces you to the core concepts of information security and the main requirements of ISO/IEC 27001. It shows how an organization uses an ISMS to manage its risks. A strong starting point if you are new to the standard or support an ISMS team.

Course Summary

Delivery format: Self-study
Language: English
Suggested study schedule (The Tech Academy): 7 days at 3 hours a day, about 21 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as two days of study, including the exam.
Included: More than 200 pages of PECB course material, the exam and certificate fees and an attestation of course completion worth 14 CPD credits
Credential: Passing the exam lets you apply for the PECB Certificate Holder in ISO/IEC 27001:2022 Foundation credential. It is open to everyone who passes the exam and signs the PECB Code of Ethics
Support: Exam support from The Tech Academy, including office hours every two weeks for 90 days from enrollment, comes with this course. See Exam Support on this page.
Portfolio: Optional ISO 27001 Foundation Portfolio from The Tech Academy, sold separately for USD $297. See Build Your Portfolio on this page

Why Should You Attend?

This course covers the essential parts of implementing and managing an ISMS based on ISO/IEC 27001:2022. Topics include the information security policy, procedures, performance measurement, management commitment, internal audit, management review and continual improvement.

After the course, you can sit the exam and apply for the PECB Certificate Holder in ISO/IEC 27001:2022 Foundation credential. It shows that you know the core requirements, methods and management approaches of the standard.

Who Should Attend?

Career changers moving into governance, risk and compliance (GRC) roles, such as GRC Analyst
Graduates who want to show proof of their skills at interviews: a PECB certificate plus portfolio pieces from the ISO 27001 Foundation Portfolio
Managers and consultants who want to build their knowledge of information security
Professionals who want to become familiar with the requirements of ISO/IEC 27001:2022
People who carry out or are responsible for information security activities in their organization
People who want to start a career in information security

Learning Objectives

By the end of this course, you will be able to:

Describe the main concepts, principles and definitions of information security management
Explain the main ISO/IEC 27001:2022 requirements for an ISMS
Identify approaches, methods and techniques for implementing and managing an ISMS

Exam Support from The Tech Academy

Your course includes exam support from The Tech Academy, prepared separately from PECB's training materials:

Study plan: a 7-day plan at 3 hours a day that covers the two exam domains in order
Practice questions: questions for each exam domain, written by The Tech Academy, with an explanation for every answer
Study-notes guidance: how to build notes that follow the exam domains, for study and revision
Practice assessment: a timed check, scored by exam domain, that shows your strengths and the areas to revise
Exam-day checklist: how to prepare for the online exam, from the technical check 48 hours ahead to your ID and the materials allowed on your desk
Office hours: live sessions with Dr. Rose Shumba every two weeks for 90 days from enrollment, for questions about your course and about taking the PECB exam, open to everyone enrolled in this course

Educational Approach

Explanations illustrated with practical questions and examples
Practical exercises with worked examples
Practice tests similar to the certificate exam

Prerequisites

This course is open to everyone, including people new to information security.

Course Agenda

The topics follow PECB's two-day plan for this course. At your own pace, you work through them in this order.

Day 1: Introduction to ISMS concepts as required by ISO/IEC 27001:2022
Day 2: ISMS requirements and the certificate exam

Examination

The PECB ISO/IEC 27001 Foundation exam covers two competency domains:

Domain 1: Fundamental principles and concepts of an information security management system
Domain 2: Information security management system

PECB's list of exams gives the exam type, duration and available languages.

Certificate Requirements

Credential	Exam	Professional experience	ISMS project experience	Other requirements
PECB Certificate Holder in ISO/IEC 27001:2022 Foundation	PECB ISO/IEC 27001 Foundation exam	None	None	Sign the PECB Code of Ethics

Build Your Portfolio

Pair this course with the ISO 27001 Foundation Portfolio from The Tech Academy. At your own pace, you build five portfolio pieces on TechFlow, a fictional company: an executive security summary, a charter, a scope and asset profile, a risk register, and a NIST CSF 2.0 mapping of your work. Written feedback from Dr. Rose Shumba helps you strengthen each piece, and office hours every two weeks help you complete your work and explain your decisions.

Explore the ISO 27001 Foundation Portfolio

The PECB training course, examination, application, and credential are separate from this Tech Academy program. Portfolio work is clearly identified as a simulated project.

Questions About Enrolling

Does passing the exam make me certified?

Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.

Can I add a portfolio program?

Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.

Explore the portfolio programs and find the one for your course

Do I need a portfolio program to get exam support?

Exam support, including office hours every two weeks for 90 days from enrollment, comes with the ISO/IEC 27001 and ISO/IEC 42001 courses themselves. Portfolio programs are an optional extra, sold separately.

Can I join a portfolio program if I trained with another provider?

Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.