Skip to main content
Ace Skills Consulting
PECB logoAdvanced

PECB LI: ISO/IEC 27001:2022 Lead Implementer

Build an information security management system that works in practice and stands up to a certification audit.

  • 40 hours of live, trainer-led sessions
  • Step-by-step ISMS implementation using one case organisation
  • Practical work on scope, risk assessment and Statement of Applicability
  • Covers the ISO/IEC 27001:2022 Annex A controls
  • Exam preparation for the PECB Lead Implementer exam
Aligned to PECB exam PECB LI
Duration
5 Days | 40 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Advanced
Exam
PECB LI
Language
English

Why learn PECB LI with Ace Skills

  • Implementation, not theory

    Each clause is tied to a concrete deliverable, so you leave knowing what to produce and in which order.

  • One project, end to end

    A single case organisation runs through the course, from scope and risk to internal audit and management review.

  • Up to date with 2022

    Covers the restructured Annex A controls and the clause changes introduced in the 2022 edition.

  • Ready for the exam

    Scenario-based practice prepares you for the PECB exam's focus on applying the standard to situations.

Course overview

ISO/IEC 27001 is the most widely adopted standard for information security management, and many customers in India and the Gulf now expect suppliers to hold certification. Implementing it well is a management exercise as much as a technical one: you need leadership commitment, a sensible scope, a repeatable risk process and controls people will actually follow. This five-day course shows you how to put those pieces together.

The course follows the life of an implementation project. Day one introduces the standard, its structure and the 2022 changes, and how it relates to ISO/IEC 27002 and other management system standards. Day two covers initiation: understanding the organisation, defining scope, securing leadership support and setting policy and objectives. Day three is the heart of the work, with risk assessment, risk treatment, the Statement of Applicability and control selection across the organisational, people, physical and technological themes. Day four covers operation: documented information, awareness, incident management, monitoring, internal audit and management review. Day five deals with continual improvement, preparing for the certification audit, and exam readiness.

Throughout the week you work on one case organisation. You will define its scope, run a risk assessment, draft a Statement of Applicability and plan internal audit and management review. By the end you have a set of worked examples you can reuse on real projects.

This course is aligned to the PECB Certified ISO/IEC 27001 Lead Implementer exam. Ace Skills Consulting does not provide PECB-licensed courseware; confirm the current exam rules and certification requirements with PECB before booking.

Key features

  • Trainer with hands-on ISMS implementation experience
  • Implementation-project structure from scoping to certification audit
  • Case organisation used across all five days
  • Worked examples of scope, risk register and Statement of Applicability
  • Clause-by-clause and control-by-control discussion of the 2022 edition
  • Practice questions and mock exam
  • Course completion certificate from Ace Skills Consulting

Who should attend

  • Information security managers and officers
  • IT and compliance managers leading ISO/IEC 27001 projects
  • Consultants who implement management systems
  • Members of an ISMS implementation team
  • Professionals moving into governance, risk and compliance roles

Prerequisites

  • Basic understanding of information security concepts
  • Familiarity with how an organisation's IT and business functions operate
  • Prior reading of ISO/IEC 27001 is helpful but not required

Curriculum

5 Days · 40 Hours · 15 Modules · 7 Labs

  1. Standards and frameworks

    • ISO/IEC 27000 family overview
    • Management system standards and the harmonised structure
    • Relationship with ISO/IEC 27002 and other frameworks
    • What changed in the 2022 edition

    Information security fundamentals

    • Confidentiality, integrity and availability
    • Assets, threats, vulnerabilities and risk
    • Controls and their objectives

    The ISMS approach

    • Process approach and PDCA
    • Certification process overview
    • Choosing an implementation methodology
    • Lab: Map a case organisation's current security practices to ISMS clauses · 45 min

  2. Initiating the project

    • Business case and leadership commitment
    • Project team and roles
    • Gap analysis

    Context and scope

    • Internal and external issues
    • Interested parties and requirements
    • Defining ISMS scope and boundaries
    • Lab: Define the ISMS scope for the case organisation · 50 min

    Leadership and policy

    • Information security policy
    • Roles, responsibilities and authorities
    • Information security objectives and measures
    • Lab: Draft an information security policy outline · 35 min

  3. Risk assessment

    • Risk assessment methodology and criteria
    • Asset and scenario-based approaches
    • Risk analysis and evaluation
    • Lab: Run a risk assessment for five critical assets · 60 min

    Risk treatment

    • Treatment options
    • Risk treatment plan
    • Risk acceptance and owners

    Annex A controls

    • Organisational controls
    • People controls
    • Physical controls
    • Technological controls
    • Statement of Applicability
    • Lab: Build a Statement of Applicability with justifications · 50 min

  4. Support and operation

    • Documented information and its control
    • Competence and awareness programmes
    • Communication plan
    • Operational planning and control

    Incidents and change

    • Information security incident management
    • Managing changes to the ISMS
    • Supplier relationships

    Performance evaluation

    • Monitoring, measurement and metrics
    • Internal audit programme
    • Management review
    • Lab: Design ISMS metrics and an internal audit plan · 45 min

  5. Continual improvement

    • Nonconformities and corrective action
    • Continual improvement methods
    • Maintaining the ISMS after certification

    Preparing for certification

    • Choosing a certification body
    • Stage 1 and stage 2 audits
    • Handling audit findings

    Exam readiness

    • Competency domains review
    • Scenario-based practice questions
    • Mock exam and review
    • Lab: Mock exam with scenario questions · 90 min
Download full syllabus (PDF)

Skills you will gain

  • ISO/IEC 27001:2022
  • ISMS implementation
  • Gap analysis
  • ISMS scoping
  • Information security risk assessment
  • Risk treatment
  • Statement of Applicability
  • Annex A controls
  • Security policy
  • Internal audit planning
  • Management review
  • Corrective action

Tools & technologies

  • ISMS document templates
  • Risk register template
  • Statement of Applicability template
  • Gap analysis checklist

Certification exam

Exam details
Exam namePECB Certified ISO/IEC 27001 Lead Implementer
Exam codePECB LI
Voucher includedNo — book directly with the vendor

Skill areas measured

  1. Fundamental principles and concepts of an information security management system
  2. Information security management system requirements
  3. Planning of an ISMS implementation based on ISO/IEC 27001
  4. Implementation of an ISMS based on ISO/IEC 27001
  5. Monitoring and measurement of an ISMS based on ISO/IEC 27001
  6. Continual improvement of an ISMS based on ISO/IEC 27001
  7. Preparation for an ISMS certification audit

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 40 hours of live, trainer-led sessions
  • 7 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 50 min

    Define the ISMS scope for the case organisation

  • Day 3 · 60 min

    Run a risk assessment for five critical assets

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The PECB certification itself is awarded by PECB when you pass exam PECB LI.

Frequently asked questions

Does passing the exam make me a certified Lead Implementer?

Not on its own. PECB awards credential levels based on the exam plus documented professional and project experience, so check the current requirements with PECB.

Is the exam included?

Exam arrangements depend on the batch. Ask our team before enrolling, and confirm the current exam rules directly with PECB.

Should I choose Lead Implementer or Lead Auditor?

Choose Lead Implementer if you will build or run an ISMS, and Lead Auditor if you will audit one. Many practitioners eventually take both.

Do I need a copy of the standard?

It is strongly recommended to buy your own copy of ISO/IEC 27001:2022 from ISO or your national standards body; we do not distribute the standard.

Can you help our organisation run its own implementation?

This is a training course, but corporate batches can use your organisation as the case study so the outputs feed into your real project.

Related courses

Explore more

All Cybersecurity courses PECB certifications

PECB is a trademark of Professional Evaluation and Certification Board. ISO/IEC 27001 is a standard published by ISO and IEC.

Train your team on PECB LI

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.