ISO/IEC 27001 Lead Implementer

Every organization holds information it needs to protect, such as customer records, payment details and business plans. Customers and partners often ask for proof that this information is well protected, and ISO/IEC 27001 certification is a widely recognized way to provide it.

ISO/IEC 27001 is the international standard for managing information security. It sets out how an organization finds the risks to its information and chooses safeguards, called controls, to reduce them. The organization then checks and improves its approach over time. This way of working is called an information security management system, or ISMS. An implementer is the person who plans the ISMS and puts it in place.

The PECB ISO/IEC 27001 Lead Implementer training course prepares you to establish, operate and improve an ISMS based on ISO/IEC 27001. It covers scope, risk assessment, risk treatment and preparing an organization for its certification audit. Designed for implementation teams, security leaders and advisors.

Course Summary

Delivery format: Self-study
Language: English
Suggested study schedule (The Tech Academy): 14 days at 3 hours a day, about 42 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as five days of study, including the exam.
Included: More than 450 pages of PECB course material, the exam and certification fees and an attestation of course completion worth 31 CPD credits
Credential: Passing the exam lets you apply for a PECB ISO/IEC 27001 Implementer credential. PECB awards the level that matches your experience, starting at Provisional Implementer for people new to the field. Certification Requirements, farther down this page, lists every level
Support: Exam support from The Tech Academy, including office hours every two weeks for 90 days from enrollment, comes with this course. See Exam Support on this page.
Portfolio: Optional ISO 27001 Lead Implementer Portfolio from The Tech Academy, sold separately for USD $397. See Build Your Portfolio on this page

Why Should You Attend?

Organizations working toward ISO/IEC 27001 certification need people who can lead the work, from setting the scope of the ISMS to preparing for the audit. This course covers ISMS best practices and a framework for managing and continually improving information security.

After the course, you can sit the exam and apply for the PECB Certified ISO/IEC 27001 Lead Implementer credential, or the level that matches your experience.

Who Should Attend?

Career changers moving into governance, risk and compliance (GRC) roles, such as GRC Analyst
Graduates who want to show proof of their skills at interviews: a PECB certificate plus portfolio pieces from the ISO 27001 Lead Implementer Portfolio
Managers or consultants involved in implementing an ISMS
Project managers, consultants or expert advisors who want to master ISMS implementation
People responsible for keeping an organization in conformity with ISMS requirements
Members of an ISMS implementation team

New to ISO/IEC 27001? Start with the ISO/IEC 27001 Foundation course, then move on to this one.

Learning Objectives

By the end of this course, you will be able to:

Explain the concepts and principles of an ISMS based on ISO/IEC 27001
Interpret the requirements of ISO/IEC 27001 from an implementer's point of view
Start and plan an ISMS implementation using PECB's IMS2 Methodology and other best practices
Support an organization in operating, maintaining and continually improving its ISMS
Prepare an organization for a third-party certification audit

Exam Support from The Tech Academy

Your course includes exam support from The Tech Academy, prepared separately from PECB's training materials:

Study plan: a 14-day plan at 3 hours a day that covers the seven exam domains in order
Practice questions: questions for each exam domain, written by The Tech Academy, with an explanation for every answer
Study-notes guidance: how to build notes that follow the exam domains. PECB lists personal notes among the references allowed in this open-book exam
Practice assessment: a timed check, scored by exam domain, that shows your strengths and the areas to revise
Exam-day checklist: how to prepare for the online exam, from the technical check 48 hours ahead to your ID and the materials allowed on your desk
Office hours: live sessions with Dr. Rose Shumba every two weeks for 90 days from enrollment, for questions about your course and about taking the PECB exam, open to everyone enrolled in this course

Educational Approach

Essay-type exercises, multiple-choice quizzes and examples of implementation best practices
Exercises based on a case study
Quizzes structured like the certification exam

Prerequisites

General knowledge of ISMS concepts and ISO/IEC 27001. The ISO/IEC 27001 Foundation course is a good way to build it.

Course Agenda

The topics follow PECB's five-day plan for this course. At your own pace, you work through them in this order.

Day 1: Introduction to ISO/IEC 27001 and initiation of an ISMS implementation
Day 2: Planning an ISMS implementation
Day 3: Implementing an ISMS
Day 4: ISMS monitoring, continual improvement and preparing for the certification audit
Day 5: Certification exam

Examination

The PECB ISO/IEC 27001 Lead Implementer exam covers seven competency domains:

Domain 1: Fundamental principles and concepts of an information security management system
Domain 2: Information security management system requirements
Domain 3: Planning an ISMS implementation based on ISO/IEC 27001
Domain 4: Implementing an ISMS based on ISO/IEC 27001
Domain 5: Monitoring and measuring an ISMS based on ISO/IEC 27001
Domain 6: Continual improvement of an ISMS based on ISO/IEC 27001
Domain 7: Preparing for an ISMS certification audit

PECB's list of exams gives the exam type, duration and available languages.

Certification Requirements

After you pass the exam, you apply for the credential that matches your experience. Every level requires a pass on the PECB ISO/IEC 27001 Lead Implementer exam, or an equivalent, and a signed PECB Code of Ethics.

Credential	Professional experience	ISMS project experience
PECB Certified ISO/IEC 27001 Provisional Implementer	None	None
PECB Certified ISO/IEC 27001 Implementer	2 years, including 1 year in information security management	200 hours
PECB Certified ISO/IEC 27001 Lead Implementer	5 years, including 2 years in information security management	300 hours
PECB Certified ISO/IEC 27001 Senior Lead Implementer	10 years, including 7 years in information security management	1,000 hours

Project experience can include drafting an ISMS business case, managing an ISMS implementation project or team, implementing the ISMS, managing documented information, implementing corrective actions and monitoring ISMS performance.

Build Your Portfolio

Pair this course with the ISO 27001 Lead Implementer Portfolio from The Tech Academy. At your own pace, you build thirteen portfolio pieces on TechFlow, a fictional company, following the work of implementing an ISMS, and you explain each decision. Written feedback from Dr. Rose Shumba helps you strengthen each piece, and office hours every two weeks help you complete your work and explain your decisions. We recommend building your portfolio before you sit the exam, because the work strengthens what you know.

Explore the ISO 27001 Lead Implementer Portfolio

The PECB training course, examination, application, and credential are separate from this Tech Academy program. Your portfolio is a simulated project, kept separate from the project experience you report to PECB.

Questions About Enrolling

Does passing the exam make me certified?

Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.

Can I add a portfolio program?

Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.

Explore the portfolio programs and find the one for your course

Do I need a portfolio program to get exam support?

Exam support, including office hours every two weeks for 90 days from enrollment, comes with the ISO/IEC 27001 and ISO/IEC 42001 courses themselves. Portfolio programs are an optional extra, sold separately.

Can I join a portfolio program if I trained with another provider?

Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.