Foundation
ISO 27001 Foundation
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
Understand how an organisation protects its information through an information security management system—not just security software. This beginner-friendly PECB course introduces ISO/IEC 27001:2022, information-security risks, responsibilities and controls. Choose independent Self-Study or recorded eLearning, with the official PECB examination included. Study online at your own pace and build the knowledge to contribute to an ISMS team.
- Course access
- 12 months on myPECB
- CPD credits
- 14
- Course languages
- English, French
Who it is for
- Information security and GRC professionals new to ISO 27001
- IT administrators and engineers contributing evidence to an ISMS
- Project managers supporting an ISO 27001 programme
- Risk, compliance, privacy and internal-audit team members
- Procurement and supplier-assurance personnel
- Sales and account teams answering customer security questionnaires
- Managers who need to understand certification discussions
- Learners considering Lead Implementer or Lead Auditor later
What you will learn
- Understand the information you need to protect
- Understand how an ISMS is organised
- Connect risk decisions to controls
- Understand operation, review and improvement
Course content
Day 1 — Information security and ISMS fundamentals
- Purpose of ISO/IEC 27001 and the ISO/IEC 27000 family
- Management systems and the Plan-Do-Check-Act cycle
- Confidentiality, integrity and availability
- Information and information assets
- Threats, vulnerabilities, likelihood, consequences and risk
- Benefits and structure of an information security management system
- Relationships with cloud computing, artificial intelligence and other security practices
Day 2 — ISO 27001 requirements and Foundation examination
- Organisational context, interested parties and ISMS scope
- Leadership, information security policy and objectives
- Risk assessment, risk treatment and the Statement of Applicability
- Resources, competence, awareness, communication and documented information
- Operational planning and control
- Monitoring, measurement, internal and external audits, and management review
- Nonconformity, corrective action and continual improvement
- Annex A control themes and the PECB Foundation examination
Prerequisites
- Course enrolment prerequisite: none.
- Formal education: no formal education requirement is listed in the current 2026 English candidate handbook.
- Professional, audit and ISMS project experience: none required for the Foundation certificate.
- After passing, submit the certificate application and sign the PECB Code of Ethics; PECB validates the application.
The exam
- Format
- Multiple-choice
- Duration
- 60 minutes
- Questions
- 40 multiple-choice questions worth 100 points in total, split evenly across 2 competency domains — fundamental principles and concepts of an ISMS (20 questions, 50 points) and the information security management system itself (20 questions, 50 points). Each question has one correct answer and two distractors. Confirmed against the PECB candidate handbook
- Pass mark
- 70%
What is included
Official learning
- Official PECB course materials
- 12 months of applicable myPECB access
- More than 200 pages of official material
- 14 PECB CPD credits on course completion
Examination pathway
- Official PECB Foundation examination
- Certificate application fee
- One free examination retake within the applicable PECB period
- Eligibility to apply for the Foundation certificate after passing, subject to PECB approval