Information security · Implementer / lead implementer
ISO/IEC 27001 Implementer / lead implementer
How to design, build and run a management system that meets a standard — from gap analysis and scoping to documentation, risk assessment, internal audit and certification readiness. Shorter “implementation” courses take 1–2 days; lead implementer courses 3–5 days with an exam.
1 About this qualification
This is a implementer / lead implementer course applied to ISO/IEC 27001, the standard for information security.
Requirements for an information security management system: assessing information security risks, treating them with appropriate controls, and keeping the system effective. Annex A lists 93 reference controls in four themes.
2 UK courses
Course names, certification, duration and delivery as stated by each provider. We do not list prices — they change often; see the provider’s page.
| Course (as named by the provider) | Provider | Certified by | Duration | Link |
|---|---|---|---|---|
| Implementation Training Course - ISO/IEC 27001:2022Classroom; In-house | BSI | Not stated | 2 days | Course pagechecked 3 October 2026 |
| Lead Implementer Training Course - ISO/IEC 27001:2022Classroom; Live online; In-house | BSI | Not stated | 4 days | Course pagechecked 3 October 2026 |
| ISO 27001:2022 Implementation | LRQA | Not stated | See provider | Course pagechecked 3 October 2026 |
| NQA ISO 27001 Introduction and Implementation TrainingVirtual – tutor led | NQA | Not stated | 2 days | Course pagechecked 3 October 2026 |
| ISO 27001 ISMS Implementation Training Course | Bywater | Not stated | 2 days | Course pagechecked 3 October 2026 |
| Certified ISO 27001:2022 ISMS Lead Implementer Training CourseLive online; Self-paced online; In-house | GRC Solutions (formerly IT Governance) | IBITGQ CIS LI exam (90 minutes, online) | 3 days | Course pagechecked 3 October 2026 |
| ISO 27001 Lead Implementer — Information Security Management | Firebrand Training | PECB | See provider | Course pagechecked 3 October 2026 |
Certified by: Not stated (5) · IBITGQ CIS LI exam (90 minutes, online) (1) · PECB (1). What the schemes mean.
3 How it is assessed
| Scheme | Typical length | Assessment |
|---|---|---|
| PECB | Lead Implementer: 5 days, exam on day 5. ISO 31000 Risk Manager: three days’ training, exam on day 4 | PECB exam; credentials from Provisional Implementer to Senior Lead Implementer depending on experience |
| IBITGQ (GRC Solutions, ISO 27001) | 3 days | CIS LI online exam, 90 minutes |
| Provider-certified (e.g. BSI) | Implementation 2 days; lead implementer 4–5 days | Lead implementer courses include an exam (BSI: its 5-day ISO 9001:2026 Lead Implementer adds two days of content with an examination to its requirements and implementation courses) |
4 How to prepare
- Lead implementer: a 3-week study planPrepare for an implementation or lead implementer course by thinking like a project manager: scope, gap analysis, risk, documentation and r…
- ISO/IEC 27001: structure and key clausesThe clauses to know before day one.
Practice questions
- ISO/IEC 27001:2022 information security 8 questions
- Harmonized Structure (clauses 4–10) 9 questions
- Audit findings and nonconformities 8 questions
- Certification schemes and auditor registration 9 questions
5 Other ISO/IEC 27001 qualifications
- ISO/IEC 27001 Foundation / requirements 6 courses
- ISO/IEC 27001 Internal auditor 7 courses
- ISO/IEC 27001 Lead auditor 8 courses
- ISO/IEC 27001 Auditor conversion 4 courses
- ISO/IEC 27001 Transition (new edition) 2 courses