What Is ISO/IEC 27001?
ISO/IEC 27001 is the international standard for managing information security. It sets out how an organization finds the risks to its information and chooses safeguards, called controls, to reduce them. The organization then checks and improves its approach over time. This way of working is called an information security management system, or ISMS. Its aim is to keep information private, accurate and available to the people who need it.
Why Is ISO/IEC 27001 Important?
Organizations hold more information than ever, and customers, partners and regulators expect it to be protected. ISO/IEC 27001 helps an organization choose the security controls that fit its risks and show others that its information security is well managed. Professionals trained in the standard help organizations write security policies, assess and treat risks, and build security into everyday work.
What Does ISO/IEC 27001 Cover?
- Requirements in seven areas, clauses 4 to 10: context of the organization, leadership, planning (including risk assessment and risk treatment), support, operation, performance evaluation and improvement.
- Annex A, a list of 93 reference controls in four themes: organizational, people, physical and technological.
Benefits of PECB ISO/IEC 27001 Certification
Each course leads to its own PECB credential, and each credential shows a different level of skill:
- ISO/IEC 27001 Foundation: you can explain the main concepts and requirements of an ISMS and support an ISMS team
- ISO/IEC 27001 Lead Implementer: you can plan and implement an ISMS, assess information security risks, choose controls to treat them and lead an implementation team
- ISO/IEC 27001 Lead Auditor: you can plan, conduct and close an audit of an ISMS against ISO/IEC 27001 and manage an audit program
How Do I Get Started?
Choose the course that matches the work you want to do. Start with Foundation if you are new to ISO/IEC 27001. Choose Lead Implementer to plan and build an ISMS, or Lead Auditor to audit one.
View Available Training CoursesWho Should Attend?
- Cybersecurity graduates and career changers pursuing GRC roles.
- Professionals learning ISO/IEC 27001 and information security management.
- Teams and consultants building or improving an ISMS.
- Auditors and compliance professionals assessing information security.
- Managers responsible for information security risks and controls.
Available Training Courses
ISO/IEC 27001 Foundation
The PECB ISO/IEC 27001 Foundation training course introduces you to the core concepts of information security and the main requirements of ISO/IEC 27001. It shows how an organization uses an information security management system (ISMS) to manage its risks. A strong starting point if you are new to the standard or support an ISMS team.
View CourseISO/IEC 27001 Lead Implementer
The PECB ISO/IEC 27001 Lead Implementer training course prepares you to establish, operate and improve an ISMS based on ISO/IEC 27001. It covers scope, risk assessment, risk treatment and preparing an organization for its certification audit. Designed for implementation teams, security leaders and advisors.
View CourseISO/IEC 27001 Lead Auditor
The PECB ISO/IEC 27001 Lead Auditor training course enables you to plan, conduct and close audits of an information security management system against ISO/IEC 27001. You develop the skills to evaluate evidence, identify nonconformities and report findings, whether you perform audits or manage an audit program.
View CourseBuild Your Portfolio
Pair your ISO/IEC 27001 course with a Tech Academy portfolio program. You build portfolio pieces on TechFlow, a fictional company, and explain your decisions, with written feedback from Dr. Rose Shumba.
- ISO 27001 Foundation Portfolio: pairs with ISO/IEC 27001 Foundation
- ISO 27001 Lead Implementer Portfolio: pairs with ISO/IEC 27001 Lead Implementer
The PECB training course, examination, application, and credential are separate from this Tech Academy program.
