Certification scheme
PECB
PECB certifies individuals through its own training courses and exams, delivered by partners worldwide (in the UK, for example, Firebrand Training). Its main levels are Foundation, Lead Implementer, Lead Auditor and Transition, with credentials graded by experience.
1 Courses
PECB runs courses for a wide range of ISO standards — including ISO 9001, 14001, 45001, ISO/IEC 27001, 22301, 50001, 22000, 13485, ISO/IEC 20000, ISO/IEC 27701, ISO/IEC 42001 and ISO 37001, plus ISO 31000 risk courses. Typical formats from PECB’s course pages:
| Course | Length | Notes |
|---|---|---|
| Foundation | 2 days | Exam at the end; no prerequisites; 14 CPD credits |
| Lead Implementer | 5 days | Exam on day 5; 31 CPD credits |
| Lead Auditor | 5 days | Exam on day 5; 31 CPD credits |
| Transition (e.g. ISO 9001:2026) | 2 days | Exam on day 2; 14 CPD credits |
| ISO 31000 Risk Manager / Lead Risk Manager | 3 days + exam / 5 days | 21 / 31 CPD credits |
2 Exams
PECB uses three exam types: multiple-choice closed-book, multiple-choice open-book and essay-type open-book. The ISO/IEC 27001 Lead Auditor candidate handbook (2026) describes an open-book exam of 80 multiple-choice questions, each with three options, and a 70% pass mark; you may use a hard copy of the standard and the course materials. A failed exam can be retaken free within 12 months, according to PECB’s course pages.
3 Credentials
After passing, you apply for a credential that reflects your experience. For ISO/IEC 27001 Lead Auditor, PECB lists:
| Credential | Professional experience | Audit experience |
|---|---|---|
| Provisional Auditor | None | None |
| Auditor | 2 years (1 in information security management) | 200 hours |
| Lead Auditor | 5 years (2 in information security management) | 300 hours |
| Senior Lead Auditor | 10 years (7 in information security management) | 1,000 hours |
The implementer route mirrors this (Provisional Implementer to Senior Lead Implementer, with project experience instead of audit hours). PECB certifications are valid for three years; to keep them you meet CPD requirements and pay an annual maintenance fee.
Other schemes: CQI and IRCA · Exemplar Global · IBITGQ
S Sources
Facts on this page last checked 3 October 2026.
- PECB, ISO/IEC 27001 Lead Auditor — https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27001/iso-iec-27001-lead-auditor
- PECB, ISO/IEC 27001 Lead Implementer and Foundation course pages
- PECB, ISO 9001:2026 Transition — https://pecb.com/en/education-and-certification-for-individuals/iso-9001/iso-9001-transition/
- PECB, ISO 31000 Risk Manager / Lead Risk Manager course pages
- PECB, Exam Rules and Policies — https://pecb.com/en/exam-rules-and-policies
- PECB, Candidate Handbook ISO/IEC 27001 Lead Auditor (MC), v1.5 — https://pecb.com/pdf/candidate-handbooks/pecb-candidate-handbook-iso-27001-lead-auditor-mc.pdf