Certification scheme
IBITGQ
The International Board for IT Governance Qualifications sets the exams for the ISO/IEC 27001 qualifications taught by GRC Solutions (formerly IT Governance Ltd): Certified ISO 27001 ISMS Foundation, Lead Implementer (CIS LI) and Lead Auditor (CIS LA).
1 Qualifications
UK courses from GRC Solutions — the new name for IT Governance Ltd — lead to IBITGQ-set qualifications rather than CQI and IRCA certificates:
| Qualification | Course length | Exam |
|---|---|---|
| Certified ISO 27001:2022 ISMS Foundation | 1 day | 60-minute online exam |
| ISO 27001:2022 Certified ISMS Lead Implementer (CIS LI) | 3 days | 90-minute online exam |
| ISO 27001:2022 Certified ISMS Lead Auditor (CIS LA) | 5 days | Exam included; the qualification is valid for three years, then you recertify |
2 How it compares
IBITGQ qualifications are specific to the IT governance field. If an employer or certification body asks specifically for an IRCA-registered ISMS auditor, check whether a CQI and IRCA certified ISO/IEC 27001 lead auditor course is a better fit.
Other schemes: CQI and IRCA · PECB · Exemplar Global
S Sources
Facts on this page last checked 3 October 2026.
- GRC Solutions — https://grcsolutions.io/ (“the new face of IT Governance Ltd, DQM GRC and GRCI Law”)
- GRC Solutions, Certified ISO 27001:2022 ISMS Foundation / Lead Implementer / Lead Auditor training course pages — https://uk.grcsolutions.io/category/iso-27001