Lead Implementer
ISO 27001 Lead Implementer
2026 edition
Self-paced PECB training delivered via myPECB.
Global training partner Aegentra is an official PECB authorised training partner and an official CompTIA partner.
This professional implementation course is designed for people who will help an organisation establish, operate, monitor and continually improve an information security management system. PECB supplies the official course materials, examination and credential scheme.
- Course access
- 12 months on myPECB
- Typical study effort
- 30–40 hours
- CPD credits
- 31
- Course languages
- English, French, Spanish
Who it is for
- ISMS managers and prospective ISMS owners
- Information security and GRC professionals
- Implementation consultants
- Project managers leading an ISO 27001 programme
- Technology or security managers responsible for certification readiness
- Internal auditors moving into implementation work
- Members of an ISMS implementation team
What you will learn
- Explain the fundamental concepts and principles of an information security management system.
- Define organisational context, interested parties, ISMS scope, leadership responsibilities, policy and information security objectives.
- Plan an ISO 27001 implementation project using a structured implementation methodology.
- Develop and maintain an information security risk assessment, risk treatment plan and Statement of Applicability.
- Support the implementation and operation of selected Annex A controls based on the organisation's risks and requirements.
- Establish monitoring, measurement, internal audit, management review, corrective action and continual-improvement activities.
- Prepare the organisation and its evidence for an independent Stage 1 and Stage 2 certification audit.
Course content
ISMS fundamentals and implementation project initiation
- ISO/IEC 27001 structure and principles
- PECB implementation methodology
- Implementation business case
- Project governance and stakeholder engagement
Organisational context, scope and leadership
- Internal and external context
- Interested parties and requirements
- ISMS scope
- Roles and responsibilities
- Information security policy and objectives
Risk assessment, treatment and the Statement of Applicability
- Risk criteria
- Risk identification and analysis
- Risk evaluation and acceptance
- Risk treatment
- Control selection
- Statement of Applicability
Implementing and operating the ISMS
- Implementation planning
- Resources and competence
- Documented information
- Operational controls
- Annex A implementation considerations
- Evidence design
Monitoring, internal audit and continual improvement
- Monitoring and measurement
- Performance indicators
- Internal audit programme
- Management review
- Nonconformity and corrective action
- Continual improvement
Certification readiness and examination
- Selecting an independent certification body
- Stage 1 and Stage 2 preparation
- Evidence organisation
- Responding to nonconformities
- Certification surveillance
- PECB certification examination
Prerequisites
- General knowledge of information security management system concepts and ISO/IEC 27001.
- ISO 27001 Foundation is not a mandatory prerequisite, but it may be useful for learners who are completely new to management systems or information security terminology.
The exam
- Format
- Open-book, multiple-choice — stand-alone and scenario-based questions
- Duration
- 3 hours
- Questions
- 80 multiple-choice questions across 7 competency domains, including stand-alone and scenario-based questions
- Pass mark
- 70%
Credential tiers
| Credential | Professional experience | Project activity |
|---|---|---|
| Provisional Implementer | No professional experience required | No project hours required |
| Implementer | Two years; one year in information security management | 200 hours |
| Lead Implementer | Five years; two years in information security management | 300 hours |
| Senior Lead Implementer | Ten years; seven years in information security management | 1,000 hours |
What is included
Course materials
- Official PECB ISO/IEC 27001 Lead Implementer course materials
- More than 450 pages of official training material
- 12 months of myPECB course access from course assignment
- Delivery-specific learning content for the selected study mode
Exam package
- Official PECB Lead Implementer examination included
- Certification fee included
- Three-hour, open-book, 80-question multiple-choice examination under the current course record
- Initial examination attempt plus one free retake within the applicable 12-month PECB examination cycle
- Eligibility to apply for the relevant PECB credential tier after passing, subject to experience and PECB requirements