Information security · Foundation / requirements
ISO/IEC 27001 Foundation / requirements
An introduction to a standard: what it requires, the vocabulary and how the clauses fit together. Usually one or two days, with a short test or none. The usual first step, and often a recommended prerequisite for auditor courses.
1 About this qualification
This is a foundation / requirements course applied to ISO/IEC 27001, the standard for information security.
Requirements for an information security management system: assessing information security risks, treating them with appropriate controls, and keeping the system effective. Annex A lists 93 reference controls in four themes.
2 UK courses
Course names, certification, duration and delivery as stated by each provider. We do not list prices — they change often; see the provider’s page.
| Course (as named by the provider) | Provider | Certified by | Duration | Link |
|---|---|---|---|---|
| Requirements of ISO/IEC 27001:2022 - Training CourseLive online; On-demand eLearning; In-house | BSI | Not stated | 1 day | Course pagechecked 3 October 2026 |
| Introduction to ISO 27001:2022 Requirements | LRQA | Not stated | 1 day (classroom and virtual) | Course pagechecked 3 October 2026 |
| Introduction to ISO 27001 Training Course | Bywater | Not stated | 1 day | Course pagechecked 3 October 2026 |
| ISO/IEC 27001:2022 Foundation Course — CQI|IRCA ref FD134 | Batalas | CQI and IRCA certified | See provider | Course pagechecked 3 October 2026 |
| Certified ISO 27001:2022 ISMS Foundation Training CourseLive online; Self-paced online | GRC Solutions (formerly IT Governance) | IBITGQ exam (60 minutes, online) | 1 day | Course pagechecked 3 October 2026 |
| ISO 27001 Foundation — Information Security Management | Firebrand Training | PECB | See provider | Course pagechecked 3 October 2026 |
Certified by: Not stated (3) · CQI and IRCA certified (1) · IBITGQ exam (60 minutes, online) (1) · PECB (1). What the schemes mean.
3 How it is assessed
| Scheme | Typical length | Assessment |
|---|---|---|
| CQI and IRCA | Auditing foundation approx. 7 hours; quality foundation courses approx. 8–16 hours | Short assessment at the end (format varies by provider) |
| PECB | 2 days (e.g. ISO/IEC 27001 Foundation, ISO 9001 Foundation) | Exam; leads to a “Certificate Holder” credential |
| IBITGQ (GRC Solutions) | 1 day (ISO 27001 Foundation) | 60-minute online exam |
| Provider-branded courses | 1 day classroom/live online, or a few hours of eLearning | Often none, or a short quiz |
4 How to prepare
- Foundation: getting started with a standard in 2 weeksHow to get the most from a foundation or requirements course when a standard is completely new to you.
- ISO/IEC 27001: structure and key clausesThe clauses to know before day one.
Practice questions
- ISO/IEC 27001:2022 information security 8 questions
- Harmonized Structure (clauses 4–10) 9 questions
- Audit findings and nonconformities 8 questions
- Certification schemes and auditor registration 9 questions
5 Other ISO/IEC 27001 qualifications
- ISO/IEC 27001 Internal auditor 7 courses
- ISO/IEC 27001 Lead auditor 8 courses
- ISO/IEC 27001 Implementer / lead implementer 7 courses
- ISO/IEC 27001 Auditor conversion 4 courses
- ISO/IEC 27001 Transition (new edition) 2 courses