After this course you can run the implementation of an ISMS based on ISO/IEC 27001 as a project: define the scope, treat risks, select controls, measure effectiveness and prepare for the certification audit. You will know which documents are really needed and how to involve management and business teams. The course suits you if you are a manager, consultant or ISMS team member responsible for implementation. You should already know the basic concepts of the standard.
What you’ll take away.
- Interpret the ISO/IEC 27001 requirements from an implementer's perspective
- Develop the scope, risk treatment and Statement of Applicability
- Select and implement controls, and measure their effectiveness
- Use internal audits and management reviews to drive improvement
- Prepare an organisation for its certification audit
Your training in detail
- Who is it for?
- Managers, consultants and project leads who implement an ISMS, plus ISMS team members and those responsible for conformity with the standard.
- Prerequisites
- You should know the basics of ISMS and ISO/IEC 27001, for example from a Foundation course.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Structure of the standard and the organisation's starting point
Leadership, scope and current-state analysis
Risk management and the Statement of Applicability
Controls, documented information and awareness
Monitoring, internal audit and management review
Handling nonconformities and preparing for the certification audit
Exam domains and scenario questions
For a fictional software company you define the scope, assess risks and draft a Statement of Applicability with an implementation plan.
Exams, licences & credentials
This course prepares you for the PECB Certified ISO/IEC 27001 Lead Implementer exam. The exam and its fees are included only if your offer confirms this. The certificate comes from PECB, not NextNowa. This is not an official PECB course.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
Is passing the exam enough for the Lead Implementer title?
Not on its own. PECB tiers its credentials by professional and project experience. Without experience, the Provisional Implementer level is available.
Does the course certify my company?
No. The personal certificate applies to you. An organisation has its ISMS audited separately by a certification body.
Does PECB Certified ISO/IEC 27001 Lead Implementer: implementing an ISMS include a certificate?
This course prepares you for the PECB Certified ISO/IEC 27001 Lead Implementer exam. The exam and its fees are included only if your offer confirms this. The certificate comes from PECB, not NextNowa. This is not an official PECB course.