Design, implement and manage an ISMS compliant with ISO/IEC 27001
The ISO/IEC 27001 Lead Implementer training course enables you to acquire the skills required to plan, implement, maintain and improve an Information Security Management System (ISMS) in accordance with the requirements of ISO/IEC 27001.
It provides a structured and practical approach to leading an ISMS project, coordinating the various stakeholders and preparing the organization for a certification audit. This approach aligns with PECB’s official objectives for this training course.
Who is this training for?
This training course is particularly suitable for:
- Information security managers and CISOs
- IT managers
- Quality, risk or compliance managers
- ISMS project managers
- Information security consultants
- Members of a team responsible for implementing or maintaining an ISMS
What you will learn
By the end of the training, you will be able to:
- Understand and interpret the requirements of ISO/IEC 27001 from an implementation perspective
- Plan an ISMS implementation project
- Define the required roles, responsibilities, policies and processes
- Manage the implementation of the ISMS within the organization
- Integrate risk management into the operation of the ISMS
- Monitor and measure ISMS performance
- Implement a continual improvement approach
- Prepare the organization for an ISO/IEC 27001 certification audit
Programme
Part 1 — Introduction to ISO/IEC 27001 and ISMS initiation
Introduction to ISO/IEC 27001:2022, information security principles and the operation of an Information Security Management System.
Part 2 — Implementation planning
ISMS planning: analysis of the organizational context and definition of security objectives.
Part 3 — ISMS implementation
ISMS implementation: risk management, policies and security controls.
Part 4 — Monitoring, improvement and preparation for certification
Monitoring and improvement: internal audit, performance evaluation, corrective actions and exam preparation.
Exam and certification
Upon completion of the training course, you will be able to take the PECB Certified ISO/IEC 27001 Lead Implementer exam.
The exam lasts 3 hours and covers seven competency domains, ranging from the fundamental principles of an ISMS to preparation for the certification audit.
The exam and certification fees are included in the training price. In the event of failure, PECB provides one free retake within 12 months of the first exam.
After passing the exam, the PECB certification level you can obtain depends on your professional experience and your experience in ISMS implementation projects. The full PECB Certified ISO/IEC 27001 Lead Implementer certification notably requires five years of professional experience, including two years in information security management, as well as 300 hours of ISMS project activities.
Official PECB documentation
Consult the official PECB brochure to learn more about the training objectives, programme, exam arrangements and certification information.
Download the official PECB brochure (PDF)
What’s next?
This training course provides an excellent foundation for progressing to more advanced courses, including:
- ISO/IEC 27001 Lead Auditor
- ISO/IEC 27002 Lead Manager
- ISO/IEC 27005 Risk Manager



