PECB Certified ISO/IEC 27001 Lead Implementer

Module 1: Introduction to ISO/IEC 27001 and Initiation of an ISMS

• Information security fundamentals
• Information Security Management System (ISMS)
• ISO/IEC 27001 principles
• Benefits of an ISMS
• ISMS scope
• Organizational context
• Interested parties
• Leadership and commitment
• Information security objectives
• ISMS implementation initiation
• Implementation roles and responsibilities
• ISMS implementation business case

Module 2: Planning the Implementation of an ISMS

• ISMS implementation methodology
• PECB IMS2 Methodology
• Implementation planning
• Gap analysis
• Information security risk assessment
• Risk identification
• Risk analysis and evaluation
• Risk treatment
• Statement of Applicability
• Information security objectives
• Implementation roadmap
• Resource planning
• Documentation requirements

Module 3: Implementation of an ISMS

• Establishing ISMS policies
• Developing procedures
• Implementing information security controls
• Managing documented information
• Roles and responsibilities
• Information security awareness
• Communication
• Operational planning and control
• Risk treatment implementation
• Control implementation
• Managing ISMS implementation teams
• Corrective actions

Module 4: ISMS Monitoring, Measurement and Continual Improvement

• ISMS performance monitoring
• Measurement and analysis
• Security objectives monitoring
• Internal review
• Management review
• Nonconformity management
• Corrective actions
• Continual improvement
• ISMS effectiveness
• Performance indicators
• Maintaining ISMS conformity

Module 5: Preparing for the ISO/IEC 27001 Certification Audit

• Certification audit fundamentals
• Certification audit preparation
• Audit readiness
• Documentation review
• Internal audit considerations
• Corrective action management
• Evidence preparation
• Management review
• Certification audit process
• Supporting the third-party audit
• Addressing audit findings

• Information Security Managers
• ISMS Managers
• Information Security Consultants
• ISO/IEC 27001 Consultants
• Project Managers
• Information Security Officers
• GRC Professionals
• Compliance Professionals
• Risk Management Professionals
• Security Managers
• IT Managers
• Information Security Advisors
• ISMS Team Members
• Professionals responsible for maintaining ISO/IEC 27001 conformity
• Consultants and advisors supporting ISMS implementation
• Professionals seeking to lead ISO/IEC 27001 implementation projects

• Understand the fundamental principles of an Information Security Management System (ISMS).
• Interpret ISO/IEC 27001 requirements from an implementer's perspective.
• Establish the scope and context of an ISMS.
• Initiate and plan an ISO/IEC 27001 implementation project.
• Conduct ISMS gap assessments.
• Identify and assess information security risks.
• Develop appropriate risk treatment strategies.
• Establish information security objectives.
• Develop an effective ISMS implementation roadmap.
• Establish information security policies and procedures.
• Implement and manage an ISMS.
• Manage documented information.
• Monitor and measure ISMS performance.
• Implement corrective actions.
• Support management reviews and continual improvement.
• Prepare an organization for a third-party ISO/IEC 27001 certification audit.
• Lead or support an ISMS implementation team.
• Apply practical implementation methodologies and best practices.

• Basic understanding of information security.
• Familiarity with management system concepts.
• General awareness of ISO/IEC 27001 requirements.
• Understanding of risk management is beneficial.
• Experience in information security, IT, compliance, audit, or GRC is advantageous.
• Experience participating in an ISMS project is helpful but not mandatory for attending the training.

Certification: PECB Certified ISO/IEC 27001 Lead Implementer
Exam: PECB Certified ISO/IEC 27001 Lead Implementer Examination
Duration: 3 Hours
Exam Level: Professional