Skip to content

Self-paced course selection guide

ISO 27001 training: Foundation, Implementer or Auditor?

Choose ISO/IEC 27001 training according to your role in an information security management system (ISMS). Foundation builds shared understanding; Lead Implementer addresses establishing and improving the system; Lead Auditor focuses on evaluating it through an audit.

These courses prepare individuals. Taking a course or earning a personal credential does not certify your organization’s ISMS. An organization’s certification audit is a separate process. You also do not need to purchase all three courses as a mandatory sequence: compare the prerequisites and your existing knowledge first.

Compare the levels

Foundation

You need to understand the standard and contribute to an ISMS team.

Learning focus
ISMS terminology, the purpose of its requirements, and how the management system supports information security.
Before choosing
A useful starting point when ISO 27001 is new to you. Review the course’s examination requirements.
Course price
$899 USD
View Foundation course

Lead Implementer

You are responsible for establishing, operating or improving an ISMS.

Learning focus
Implementation planning, documented information, operation, monitoring and preparation for certification audit.
Before choosing
You should already understand ISMS concepts. The Lead credential has experience requirements beyond passing the exam.
Course price
$1,299 USD
View Lead Implementer course

Lead Auditor

You need to plan and conduct audits of an ISMS.

Learning focus
Audit preparation, collecting and evaluating evidence, reporting findings and audit follow-up.
Before choosing
Review the required information-security and audit knowledge, plus experience criteria for the credential you intend to apply for.
Course price
$1,299 USD
View Lead Auditor course

How a team might choose

Illustrative example: a company is preparing its first ISMS. A project owner will coordinate implementation, department representatives will supply information, and internal auditors will evaluate the system.

The project owner could consider Lead Implementer, representatives could start with Foundation, and auditors could consider Lead Auditor after checking prerequisites. Assign training by responsibility rather than buying the same senior course for everyone.

Questions to answer first

  • Will your work involve implementing the system, auditing it, or participating in it?
  • Can you explain ISMS scope, risk assessment and the role of controls before an advanced course?
  • Do you meet the experience requirements for your intended credential, or should you consider an available provisional credential?

ISO 27001 Transition

Review this option if you already know an earlier edition and need to understand the changes; confirm the edition and prerequisites before enrolling.

ISO 27005 Risk Manager

Consider a dedicated information-security risk course when assessment and treatment are your main responsibility.

Format, certification and enrollment

All AuditHive training is self-paced. PECB self-study uses official digital materials; recorded video is included only when eLearning is explicitly listed. Review each course’s package, prerequisites and access terms before purchasing. Course completion, examination and certification eligibility are separate steps, and the issuing body determines the credential you qualify for.

Complete and confirm enrollment through the course’s website checkout. An email inquiry does not enroll you. For help selecting a level, email training@auditpartners.com or request team training information.

Official course information

Use the current PECB requirements when checking examination and credential eligibility.

Compare another subject · Browse all courses