Information Security & Cybersecurity
Run the ISMS, choose and operate its controls, manage incidents and the cybersecurity programme around it.

Each organization decides what competence its roles need. Training is one way to build it, and course records are part of the evidence.
Literate
Foundation: reads the system, works inside it, knows when to escalate
ISO/IEC 27001 Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27002 Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Cybersecurity Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Lead
One Lead course: leads one side, build or verify. Foundation is for the roles around the implementer, not a prerequisite.
ISO/IEC 27005 Lead Risk Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27001 Lead Implementer
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Chief Information Security Officer (CISO)
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27002 Lead Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27035 Lead Incident Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Lead Cybersecurity Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Professional
Foundation plus both: the complete profile, both perspectives — Foundation + Lead Implementer + Lead AuditorHolding both perspectives is a competence; exercising both on the same system is not — whoever implemented a system does not audit it.
ISO/IEC 27001 Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27001 Lead Implementer
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27001 Lead Auditor
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Recommended
Not a step above Professional — the courses that pair with this path, taken alongside it.
ISO/IEC 27005 Risk Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
NIST Cybersecurity Lead Implementer
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
NIS 2 Directive Lead Implementer
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Certified Management Systems Internal Auditor
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Lead SOC 2® Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met