Business line · Training & certification
Accredited certification courses and in-company programmes delivered by the practitioners who implement these standards. We don't teach AI. We transfer judgment.
HR and L&D
Needs a credible provider with accreditation and a calendar.
Training manager
Has to fill seats on dates that suit three offices and remote staff.
CISO and risk owners
Wants certified people, not attendance certificates.
Executive teams
Needs a half day on AI value, risk and accountability, not a course.
Most training budgets are asked to solve two problems at once, and they are not the same problem. The first is certification: a named individual needs a credential that a client, an auditor or a regulator will recognise. The second is literacy: a whole population needs to work differently, and no exam measures whether they do.
Certification is the easier of the two, because the standard defines the outcome. A PECB certification is issued under ISO/IEC 17024, the international standard for bodies certifying persons, which is why it travels — a Lead Implementer certificate earned in Amsterdam is recognised by a client in Casablanca or Riyadh without further explanation. What varies between providers is not the certificate. It is whether the person teaching the standard has ever implemented one.
Literacy is harder, and it is an obligation — though a lighter one than it was until this summer. The EU AI Act's literacy duty was rewritten by the Digital Omnibus, in force since 27 July 2026: organisations must now take measures to support the development of AI literacy among the staff who operate AI systems on their behalf, rather than ensure a sufficient level in each of them. The legal threshold is gone. The practical answer has not changed at all, because a single all-staff e-learning module was never going to change what anyone does on Monday — and it is not what a client procurement questionnaire is asking about either.
So we run the two separately and price them separately. Four accredited certification tracks with the exam included, priced per seat: ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 38500 and ISO/IEC 20000. The ISO/IEC 20000 cohorts are scheduled on request; the others run on published dates. And our own AI curriculum, delivered per cohort, differentiated by role: what an executive committee needs to decide, what a manager needs to supervise, and what a finance or HR or legal team needs to actually do with the tools in front of them.
Every trainer on our roster consults. The person who teaches ISO 27001 Lead Implementer this week is implementing an ISMS the next, which is the only reliable source of the examples that make a five-day course survivable. We do not employ full-time trainers, and we consider that a feature.
Accredited courseware and examination are in English; sessions are facilitated in English or French, in person in Amsterdam and Casablanca, at your site, or live online. Our PECB reseller territory covers Europe, Africa and the Middle East — 117 countries across the two agreements — and our own AI curriculum carries no territorial limit at all.
Evaluate
Start from the role and the obligation, not from the course title.
Plan
Certification tracks sequenced so each course builds on the last.
Enable
The accredited exams that carry weight with auditors and clients.
Build
In-company delivery built around your systems and your obligations.
Operate
Awareness that is measured on outcomes rather than completion rates.
Public seats and in-company cohorts follow the same structure. The difference is whose examples are used.
For in-company delivery we read your policies, your risk register and your incident history first, so the worked examples in the room are yours. For public seats, we send the pre-reading and confirm exam registration. Nobody arrives on day one wondering what the week contains.
Instructor-led, with the exercise load weighted towards the parts the exam actually tests and the parts practitioners actually get wrong. Class sizes are held small enough that the trainer can see who is lost. We publish the daily structure in advance so participants can plan around their own workload.
Included in the seat price and sat at the end of the course while the material is current. Certification is issued by PECB following successful examination and verification of professional experience — we prepare candidates for that, and we tell them in advance where their experience may fall short of the credential they want.
Participants keep the courseware and get a route back to the trainer for questions arising from real work. For in-company programmes we review adoption with the sponsor after ninety days, because the training either changed how people work or it did not, and that is a measurable thing.
Three buyers, with genuinely different criteria. We have stopped pretending one page serves all of them equally.
Filters on price, dates, duration, language and whether the certification is recognised. Wants a supplier who can serve several markets without a separate procurement exercise for each, and an invoice that does not arrive in three parts. This is the buyer for whom we publish prices.
Sends people to close a specific capability gap — usually because an ISMS is being built, an audit is coming, or a risk methodology needs to be defensible in front of one. Cares about who is teaching, not about the venue. Frequently buys the consulting engagement and the training together, in which case we scope them as one conversation and two contracts.
Not looking for a certificate. Looking to leave a room with a decision they can defend. The executive session is one day and produces a written position on what AI is for in the business, which is a different deliverable from a course and is priced as one.
Legal, accounting, notarial and medical practices sending small numbers — sometimes the whole firm. The realistic product is a short literacy programme plus an acceptable-use position, not a five-day certification track. We say so rather than selling the bigger thing.
Public certification seats are published, because an HR buyer filters on price before anything else and a supplier who hides it gets filtered out first. Instructor-led, exam and certification included. Prices below apply to seats delivered from our European entity; delivery in Africa and the Middle East is quoted on request, and in-company programmes are always scoped individually.
| Engagement | Indicative price | Notes |
|---|---|---|
| ISO/IEC 27001 Foundation | €1,150–1,450 per seat | Two days. The entry point, and the natural feeder into the lead tracks. |
| ISO/IEC 27001 Lead Implementer | €2,350–2,850 per seat | Five days. Our highest-volume certification. |
| ISO/IEC 27001 Lead Auditor | €2,350–2,850 per seat | Five days. For internal audit and assurance rather than security operations. |
| ISO/IEC 42001 Foundation | €1,250–1,550 per seat | Two days. The shared vocabulary a governance programme needs before it starts. |
| ISO/IEC 42001 Lead Implementer | €2,350–2,850 per seat | Five days. Scarce supply and a live regulatory driver. |
| ISO/IEC 42001 Lead Auditor | €2,350–2,850 per seat | Five days. For assurance functions rather than implementation teams. |
| ISO/IEC 38500 Foundation | €1,150–1,450 per seat | Two days. The corporate governance of IT, for boards and IT leadership. |
| ISO/IEC 38500 IT Corporate Governance Manager | €1,850–2,250 per seat | Three days. Decision rights, forums and board reporting. |
| ISO/IEC 38500 Lead IT Corporate Governance Manager | €2,350–2,850 per seat | Five days. Establishing the framework and the assurance loop behind it. |
| ISO/IEC 20000 Foundation | €1,150–1,450 per seat | Two days. Scheduled on request. |
| ISO/IEC 20000 Lead Implementer | €2,350–2,850 per seat | Five days. Scheduled on request. |
| ISO/IEC 20000 Lead Auditor | €2,350–2,850 per seat | Five days. Scheduled on request. |
| Any track, self-paced | €750–950 per seat | E-learning with the exam included, for candidates who cannot release five consecutive days. |
| AI literacy — executive session | €4,500–7,500 per session | One day, up to twelve participants. Produces a written position, not a certificate. |
| AI literacy — manager programme | €6,500–11,000 per cohort | Three sessions of three hours, per cohort. English or French. |
| AI literacy — operational teams | €2,500–4,500 per session | One or two sessions of three hours, by department. Deliverable is a prompt kit and reusable workflows. |
| In-company and custom programmes | On request | Scoped against your policies, systems and risk register. |
Why the same certification costs three different amounts. Self-paced is the courseware and the examination, studied on your own schedule — the right answer for someone who cannot release five consecutive days, and the wrong one for someone who learns by arguing with a room. Instructor-led adds the five days, a practitioner who has implemented the standard rather than only taught it, and worked examples drawn from live engagements. In-company adds your own policies, your own risk register and your own systems as the material, which is why it costs more per day and less per person above six to eight participants. The certification you hold at the end is identical in all three cases.
Other PECB standards are available on request. If you need a certification we do not list, ask — our partnership covers the wider catalogue and we will tell you honestly how quickly we can schedule it.
All prices exclude VAT. Classroom sessions held in the Netherlands are subject to 21% Dutch VAT for all attendees, regardless of the attendee's country — EU rules tax admission to an educational event where the event takes place. Online and in-company delivery to businesses elsewhere in the EU is reverse-charged.
GSNA Solutions is a PECB Certified Partner and authorised reseller. PECB personnel certifications are issued under ISO/IEC 17024. Course participants who complete a certificate programme hold a certificate; they are not thereby certified, licensed, accredited or registered to practise an occupation. Certification follows successful examination and verification of professional experience against PECB's published requirements.
Certified practitioners, not readers of the regulation
Frameworks we work in
Questions
Yes. We are a PECB Certified Partner and deliver four accredited certification tracks: ISO/IEC 27001 Foundation, Lead Implementer and Lead Auditor; ISO/IEC 42001 Foundation, Lead Implementer and Lead Auditor; ISO/IEC 38500 Foundation, IT Corporate Governance Manager and Lead IT Corporate Governance Manager; and ISO/IEC 20000 Foundation, Lead Implementer and Lead Auditor.
Practitioners who implement these standards for a living. The person teaching Lead Implementer has taken organisations through certification. We don't teach AI. We transfer judgment.
Yes. In-company programmes are built around your systems, your data and your regulatory context, and can be assembled from modules across any track.
Accredited courseware and examination are in English. Sessions are facilitated in English or French, in person in Amsterdam and Casablanca, at your site, or live online.
Since the Digital Omnibus took effect in July 2026 the duty is to take measures that support the development of AI literacy among your staff — an obligation of means rather than a guaranteed level in any individual. A role-differentiated programme with an attendance and assessment record satisfies it comfortably. Keep the record anyway: the people who ask to see it are increasingly clients and insurers, and their questions have not softened.
Enforcement is slow, but procurement is not. The EU AI Act quietly rewrote the due diligence checklist in RFPs and term sheets, and most companies still cannot answer it in under a week.
Most AI efforts die between a successful pilot and a real shift in how work gets done. The technology is rarely the constraint, the operating model is.
Cyberattacks are often referred to as an external danger. Yet a much quieter, but equally dangerous, reality persists internally.
Thirty minutes with a senior practitioner. No slideware, no sales engineer.