Information security management systems
Prepare for ISMS fundamentals, implementation responsibilities, audit judgement and the controls associated with ISO/IEC 27001.
Choose the qualification that matches the work you plan to do. Every pathway has a sourced public exam guide, five free questions and an exact-exam practice bank.
Choose the role
40 questions · 70% pass mark
The ISO/IEC 27001 Foundation exam is a one-hour, closed-book PECB examination that tests foundational knowledge of information security management systems. It contains 40 multiple-choice questions, split equally across two competency domains, and has a 70% pass mark. Candidates are assessed on core information-security concepts, ISO/IEC 27001 requirements, risk management, Annex A controls, performance evaluation and continual improvement.
80 questions · 70% pass mark
The ISO/IEC 27001 Lead Implementer exam is a three-hour PECB certification examination for professionals who plan, implement, maintain and improve an information security management system. It contains 80 multiple-choice questions across seven weighted competency domains and has a 70% pass mark. Each question has three options: one correct answer and two distractors. The exam is open book, with three permitted types of reference material.
80 questions · 70% pass mark
The ISO/IEC 27001 Lead Auditor exam is a three-hour, open-book PECB certification examination for professionals who plan, conduct and manage information security management system audits. It contains 80 multiple-choice questions across seven weighted competency domains and has a 70% pass mark. Conducting an ISO/IEC 27001 audit is the largest domain, followed by audit principles and information-security fundamentals.
