Information Security
ISO/IEC 27001 Lead Implementer
Learn to establish, implement, maintain and continually improve an information security management system (ISMS) — and take an organisation from first scoping to certification-ready. Self-paced on myPECB, with 24/7 access.
Veloraa Training
COURSE INFORMATION
Your Learning, at a Glance
- Price
- 899 USD
999 USD - Category
- Information Security
- Duration
- Self-paced; suggested pace: 4–6 weeks at 6–8 hours per week
- Format
- Self-paced online eLearning via myPECB
- Certification
- PECB Certified ISO/IEC 27001 Lead Implementer (subject to passing the exam and meeting certification requirements)
Course Overview
The Credential for People Who Build Information Security Management, Not Just Describe It
Information security threats and attacks keep growing more frequent and sophisticated. The best defence is a well-run information security management system (ISMS) — and customers, legislators and partners increasingly expect one.
As a Lead Implementer, you scope the ISMS, win project approval, run risk management, produce the Statement of Applicability, implement controls and security operations, and get the organisation ready for certification. Veloraa delivers the official PECB curriculum online, with practical examples, exercises and quizzes so you can apply what you learn straight away.
Threats Keep Evolving
Attacks grow more frequent and sophisticated every year.
Security Is Expected
Customers and legislators treat information security as a requirement.
Few People Can Lead It
Organisations need practitioners who can run an ISMS project end to end.
Who Should Attend?
Anyone who will build, run or advise on information security management
No prior ISO/IEC 27001 knowledge needed.
Learning Objectives
By the end of the course you will be able to:
- Master ISMS fundamentals - Understand the concepts, methods and techniques for implementing and managing an ISMS.
- Connect the frameworks - Relate ISO/IEC 27001 to ISO/IEC 27002 and other standards and regulations.
- Interpret the requirements - Interpret and implement ISO/IEC 27001 in the specific context of an organisation.
- Plan the implementation - Scope the ISMS, win approval and analyse the existing system.
- Manage risk - Run risk management and produce a Statement of Applicability.
- Implement controls - Select, design and implement controls and run security operations.
- Drive continual improvement - Lead internal audit, management review and corrective action.
- Prepare for certification - Get an organisation ready for a thirdparty certification audit.
Curriculum
5 Modules · 27 Lessons
Lessons follow the order you’d use on a real ISMS project. Quizzes throughout.
Foundations of the ISMS5 Lessons
- 1. Course Objectives and Structure
- 2. Standards and Regulatory Frameworks
- 3. The Information Security Management System (ISMS)
- 4. Fundamental Information Security Concepts and Principles
- 5. Initiating the ISMS Implementation
You Will Be Able To Understand the standard, its concepts and how to start the project
Planning the ISMS8 Lessons
- 6. Understanding the Organisation and Its Context
- 7. ISMS Scope
- 8. Leadership and Project Approval
- 9. Organisational Structure
- 10. Analysis of the Existing System
- 11. Information Security Policy
- 12. Risk Management
- 13. Statement of Applicability
You Will Be Able To Scope the ISMS, win approval, manage risk and complete the SoA
Implementing the ISMS7 Lessons
- 14. Documented Information Management
- 15. Selection and Design of Controls
- 16. Implementation of Controls
- 17. Trends and Technologies
- 18. Communication
- 19. Competence and Awareness
- 20. Security Operations Management
You Will Be Able To Put documentation, controls, competence and security operations into practice
Monitoring and Improvement5 Lessons
- 21. Monitoring, Measurement, Analysis and Evaluation
- 22. Internal Audit
- 23. Management Review
- 24. Treatment of Nonconformities
- 25. Continual Improvement
You Will Be Able To Measure performance, audit the system and run corrective action
Certification Readiness2 Lessons
- 26. Preparing for the Certification Audit
- 27. Course Close and Exam Preparation
You Will Be Able To Get the organisation audit-ready and prepare for the exam
Downloadable Resources: 450+ pages of course notes with examples, best practices, exercises and quizzes, in editable formats.
What’s Included
- 27 video lessons Expert-led, with quizzes
- 450+ pages of notes Examples, best practices, exercises & quizzes
- Exam voucher Plus one free retake in 12 months
- Certification fee No extra cost once you pass
- 31 CPD credits Attestation of completion
Frequently Asked Questions
Do I Need Technical Skills?
No. The course focuses on management systems, risk and controls. Your work experience counts towards the higher credential levels.
How Long Do I Have to Finish?
You get [ACCESS PERIOD] of unlimited access and study at your own pace. You can take the exam whenever you are ready.
Is the Exam Online?
Yes. You book it through PECB Exams and take it remotely.
What If I Fail the Exam?
You can retake it once for free within 12 months of your first attempt.
Lead Implementer or Lead Auditor — Which Should I Take?
Choose Lead Implementer if you will build or run an ISMS, and Lead Auditor if you will assess one. Many professionals take both.
Can My Team Enrol Together?
Yes. Veloraa offers corporate and bespoke programmes. Use the enquiry form below for group pricing.
Exam & Certification
Your Path to Certification
The online exam covers seven competency domains. If you don’t pass first time, you can retake it once at no cost within 12 months.
- Complete the eLearning
27 lessons and quizzes · earn 31 CPD credits
- Pass the Exam
Book online at a time that suits you
- Apply for Your Credential
Choose the level that matches your experience
- Sign the Code of Ethics
Then receive your PECB certificate
- Maintain It
Annual maintenance and continuing education
Exam Domains
- Fundamental principles and concepts of an ISMS
- Information security management system (ISMS)
- Planning an ISMS implementation
- Implementing an ISMS
- Monitoring and measuring an ISMS
- Continual improvement of an ISMS
- Preparing for an ISMS certification audit
Credential Levels
| Credential | Experience | Project Activities |
|---|---|---|
| Provisional Implementer | None | None |
| Implementer | 2 yrs (1 in information security) | 200 hours |
| Lead Implementer This Course | 5 yrs (2 in information security) | 300 hours |
| Senior Lead Implementer | 10 yrs (7 in information security) | 1,000 hours |
All levels require passing the ISO/IEC 27001 Lead Implementer exam (or equivalent) and signing the PECB Code of Ethics. Holders of both Lead Implementer and Lead Auditor who pass four additional Foundation exams qualify for PECB Master.
Happy Clients






