PECB
Official Training Courses.

Start with ISO/IEC 27001 unless you already run a certified information security management system. It is the standard customers and auditors ask for by name, and every other course on this page either builds on it or borrows its structure. Choose Lead Implementer if you will build and operate the management system, and Lead Auditor if you will assess one.

A Lead Implementer course teaches you to plan, build and operate a management system that meets the standard. A Lead Auditor course teaches you to plan and conduct audits of that system against the standard, following ISO 19011 audit principles, whether the audit is internal, of a supplier, or for certification. The split is the same for ISO 27001, ISO 27701 and ISO 42001. Many people earn both over time.

Each covers one part of an ISO 27001 program in depth. ISO/IEC 27002 is the reference set of security controls behind 27001 Annex A. ISO/IEC 27005 is information security risk management, the process that decides which of those controls you apply. ISO/IEC 27035 is security incident management. None of the three formally requires a 27001 certification, but the courses assume you know how an information security management system works, so most people take them after 27001 Lead Implementer or Lead Auditor.

ISO/IEC 42001 is the international management system standard for artificial intelligence, published in 2023. It gives an organization a certifiable framework for governing how it builds, buys and uses AI. Take Lead Implementer if you are setting up that governance and Lead Auditor if you will assess it. Demand is rising as EU AI Act obligations reach suppliers and enterprise buyers.

They answer different questions. ISO/IEC 27701 is the privacy information management system standard, and since the 2025 edition it stands on its own, so an organization can certify a PIMS whether or not it already holds ISO 27001. Take Lead Implementer if you are building that system and Lead Auditor if you will assess one. The PECB Certified Data Protection Officer course is built around the DPO role under GDPR: the legal obligations, the day-to-day tasks, and how to work with regulators. If you hold or will hold the DPO title, take that one.

ISO 37301 is the requirements standard for compliance management systems, the framework an organization uses to identify and meet its legal, regulatory and contractual obligations. It is certifiable, and it replaced the older ISO 19600 guidance. The Lead Auditor course prepares you to assess whether a compliance management system actually works, not only whether it is documented.

Every PECB course Training Camp runs is four days of live instruction, delivered online or in person, and the PECB certification exam is included in the course price. The exam is scheduled at the end of the course, and we include one free retake within 12 months if you do not pass the first attempt.

Yes. PECB is accredited to ISO/IEC 17024, and its certification programs are recognized internationally. Training Camp delivers the official PECB courseware as an authorized training provider.

For most information security, GRC and consulting roles, yes. ISO/IEC 27001 is the internationally recognized standard for information security management, and Lead Implementer and Lead Auditor are the credentials employers name when they need someone who can build or audit a certified ISMS.