Cybersecurity certification
ISO/IEC 27001 Foundation
The two-day entry point to ISO/IEC 27001. It gives you the vocabulary, the structure of the standard and a working understanding of what an information security management system actually is, which is what most people are missing when they are asked to contribute to one.
Duration
2 days
Languages
English, French
Delivery
Classroom, In-company, Live online, Self-paced
Exam
Included in the price
CPD credits
14 Continuing Professional Development credits
Accreditation
PECB
Courseware and examination in English. Sessions facilitated in English or French.
Who it is for
Anyone who needs to work inside an ISMS without running it, project managers, auditors' counterparts, IT and compliance staff joining a certification programme.
Prerequisites
None.
What you will be able to do
- 01Explain what an ISMS is and what it is for.
- 02Navigate the structure of ISO/IEC 27001 and the Annex A control set.
- 03Describe the certification cycle and what an auditor looks for.
- 04Take part in a risk assessment without needing the method explained.
- 05Decide whether a lead-level track is the right next step.
What is covered
Fundamental concepts
Information security, the CIA triad, why a management system rather than a control list.
The standard, clause by clause
The structure of ISO/IEC 27001 and how the clauses relate.
Annex A
The control themes and how controls are selected rather than adopted wholesale.
The certification cycle
Stage 1, stage 2, surveillance and recertification.
Exam
Sat at the end of the course and included in the price.
The exam and the certificate
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB’s published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.
The same examination leads to a graded credential, from Provisional through to Senior, and the grade you receive depends on your documented professional experience and project involvement, not on your exam mark. We tell candidates before they book which grade their experience currently supports.
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB's published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.Price
€1,150–1,450 per seat
All prices exclude VAT. Classroom sessions held in the Netherlands are subject to 21% Dutch VAT for all attendees, regardless of the attendee's country — EU rules tax admission to an educational event where the event takes place. Online and in-company delivery to businesses elsewhere in the EU is reverse-charged.
GSNA Solutions is a PECB Certified Partner and authorised reseller. PECB personnel certifications are issued under ISO/IEC 17024. Course participants who complete a certificate programme hold a certificate; they are not thereby certified, licensed, accredited or registered to practise an occupation. Certification follows successful examination and verification of professional experience against PECB's published requirements.
Other courses on this track
5 days
ISO/IEC 27001 Lead Implementer
Five days on implementing an information security management system end to end, using PECB's implementation methodology. It is the course to take if certification is a commitment rather than an ambition, and it is our highest-volume track.
5 days
ISO/IEC 27001 Lead Auditor
Five days on auditing an information security management system to ISO/IEC 27001, following the audit principles of ISO 19011 and the certification-body requirements of ISO/IEC 17021-1. A different discipline from implementation, and usually a different person.
Leave with your top three risks documented
Thirty minutes with a senior practitioner. No slideware, no sales engineer.