— verify Aegentra in the PECB partner directory (opens in a new tab)Official PECB training partner
Start with how an organisation protects its information. The PECB ISO 27001 Foundation course introduces information security management systems, risk and continual improvement. Choose online Self-Study slides or recorded eLearning, with NZD prices and a separate consultancy-training option.
Draft starting price NZ$470.00per learner · Self-Study · before applicable tax
Compare formats & pricesPECB Partner ID 232290 · Verify our listing
A beginner pathway for an individual—not an organisation’s ISO 27001 certification. PECB lists exam and certificate fees in its course package; confirm the final NZ booking terms before enrolment.
Your learning format
Read and revisit with Self-Study, learn through recorded PECB video with eLearning, or request a separate course-and-consultancy package.
The consultancy session is practical Aegentra guidance, not a full live PECB course or an organisational audit. Training is online only; no physical classroom or onsite Academy training is offered. Material access, voucher dates, final inclusions and applicable tax must be confirmed before booking.
At a glance
Source: PECB course outline and Foundation candidate handbook, version 2.2. Exam arrangements can vary by language. See the retake and certificate requirements before deciding.
The award is PECB Certificate Holder in ISO/IEC 27001:2022 Foundation. It is a certificate programme, distinct from PECB’s Lead-level personnel-certification pathways. Complete the course, pass the assessment and meet the application requirements; a course purchase alone does not award it.
An organisation implements and operates an ISMS before a certification body independently assesses it. A trained employee can contribute to that work, but their Foundation certificate does not certify the company.
Explore ISO 27001 implementation supportWho this course suits best
This is management-system learning, not a programming or penetration-testing course. PECB lists no course prerequisites, but its handbook separately specifies at least secondary education for the certificate application. No professional, audit or ISMS-project experience is required for the Foundation award.
If you already know the fundamentals and need to lead a project or audit, compare the Lead Implementer and Lead Auditor pathways.
What you will learn
Use these four learning themes to organise your study. They explain the subject in practical terms; the official PECB materials remain the course syllabus.
Start with the information a service relies on: client reports, staff records, working files and the systems that hold them. Consider what unauthorised disclosure, an incorrect change or unavailable information would mean for that service.
Connect the organisation’s context and scope to leadership, responsibilities, objectives and support. Learn why a management system needs people making decisions, not simply a collection of policies.
Follow a risk from a business activity to a treatment decision. Explore the purpose of a risk register and Statement of Applicability, and why copying another organisation’s control list does not establish a suitable scope.
Look at the difference between introducing a control and checking that it works. Explore monitoring, internal audit, management review, corrective action and continual improvement as connected activities.
Free sample lesson
A fictional Wellington professional-services firm sends client reports through a shared workspace. Someone selects a public link instead of access restricted to the client. Think about the information, the risk and the evidence before reaching for a solution.
Original Aegentra learning material—not a client case study, PECB exam question or exam dump. Nothing is scored, saved or sent.
Confidentiality. The concern is access by someone who was not authorised to receive the report. Availability concerns being able to access information when needed; integrity concerns keeping it accurate and protected from inappropriate changes.
A documented decision, agreed settings, responsible owners and evidence that the controls work. A tool is only part of the response. The firm needs to understand the risk, decide how to treat it, assign responsibility and check the result. A purchase or a policy document alone is not evidence of effective operation.
No; individual learning and organisational certification are separate. Staff training can support competence. It does not establish an ISMS or replace the independent certification-body assessment needed for organisational certification.
Assessment and certificate
The English exam is closed book: 40 multiple-choice questions in one hour, with a 70% pass mark. The handbook divides questions equally between the two domains below.
50% 20 questions
Understand the fundamentals and the relationships between security, risk and management-system concepts.
50% 20 questions
Understand the requirements and how the elements of the ISMS work together.
Question allocation, not predicted marks or pass probability. PECB Foundation handbook, exam blueprint.
PECB includes one free retake in a qualifying course package, with a 15-day wait before the first retake. Its current general policy starts the 12-month Self-Study/eLearning cycle at purchase, while the Foundation handbook says coupon receipt. Confirm the applicable start and expiry dates in writing before booking; a failed attempt does not start a fresh 12 months.
Course completion, a passing result and a separate application are required. PECB checks eligibility and requires agreement to its Code of Ethics. Apply promptly: the handbook’s three-year case-closure rule is not an extension of the included voucher cycle.
Foundation holders currently have no CPD or annual maintenance fee requirement under PECB’s maintenance policy. This differs from the 14 CPD credits attached to course completion.
Choose for your role
Foundation is a starting point, not a compulsory certificate before either Lead course. Check the knowledge expected for the course you choose.
| Course | Best fit | Starting knowledge |
|---|---|---|
| Foundation | Understand information security and the ISMS. | No course prerequisites; separate certificate application requirements apply. |
| Lead Implementer | Establish, operate and improve the management system. | General knowledge of ISMS concepts and ISO 27001. |
| Lead Auditor | Plan audits, evaluate evidence and report conclusions. | ISO 27001 fundamentals and comprehensive audit-principles knowledge. |
The Lead courses have their own exam and credential criteria. A Foundation award does not waive those requirements or authorise certification-body audit work.
Free study resources
An original study map and vocabulary guide. These are learning aids, not the ISO standard, a complete implementation template or official PECB materials.
| Theme | Question to explore |
|---|---|
| 4 · Context | What services, interested parties and boundaries does this system need to address? |
| 5 · Leadership | Who makes decisions, provides direction and owns responsibilities? |
| 6 · Planning | Which risks, treatment decisions and objectives need attention? |
| 7 · Support | What people, resources, communication and documented information are needed? |
| 8 · Operation | How are the planned activities carried out and changes managed? |
| 9 · Performance evaluation | What do monitoring, internal audit and management review tell us? |
| 10 · Improvement | What needs correcting, and how will we check the improvement? |
The way an organisation directs, operates and improves its information-security management. Think beyond technology to decisions, people and evidence.
A structured record of risks and decisions. In your study notes, connect the activity, possible event, consequences, assessment, owner, treatment and follow-up.
A record connecting necessary controls, selection reasoning and implementation status. It is not simply a purchased list of controls with every box ticked.
Work on the cause of a nonconformity, not only its immediate symptom. Ask how the organisation will know the action was effective.
Separate exam-practice platform
Add 12 months of Aegentra Labs access to Self-Study or recorded PECB eLearning for NZ$120.00, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course. Independently authored practice questions are not official PECB exam content, exam dumps or a guarantee of passing.
Before you decide
The draft prices are NZ$470.00 for Self-Study and NZ$495.28 for recorded PECB eLearning, per learner before applicable tax. Course plus two hours of consultancy training is a separate package by quote. Bookings are not yet open.
Yes. Optional Aegentra Labs access is NZ$120.00 for 12 months with either Self-Study or recorded PECB eLearning. Course plus Labs is NZ$590.00 with Self-Study or NZ$615.28 with eLearning, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course. Practice questions are independently authored, not official PECB exam questions, exam dumps or a pass guarantee.
PECB lists examination and certificate fees as part of its Foundation course package. Confirm the assigned voucher, exam arrangements, material-access terms and final NZ package inclusions before booking. Aegentra’s free sample lesson is not the official course or exam.
PECB lists no course prerequisites and no professional, audit or ISMS-project experience requirement for the Foundation award. Its candidate handbook separately lists at least secondary education for the certificate application. Check that requirement with PECB if you are unsure of your eligibility.
The official taught agenda spans two days, including the examination. Self-Study and recorded eLearning are self-paced: allow time to study, work through exercises and prepare. Two days is not a guaranteed self-paced completion time or a promise of material-access duration.
The English Foundation handbook specifies 40 multiple-choice questions, one hour, closed book and a 70% pass mark. Check the instructions for your assigned exam, including identity, equipment and supervision requirements.
It is an introductory assessment, but preparation still matters. Learn the concepts, explain them in your own words and apply them to simple organisational examples. Nobody can responsibly promise a pass or predict your result from a short practice quiz.
PECB includes one free retake in a qualifying course package, with a 15-day wait before the first retake. Its current general policy starts the 12-month Self-Study/eLearning cycle at purchase, while the Foundation handbook says coupon receipt. Confirm the applicable start and expiry dates in writing before booking; a failed attempt does not start a fresh 12 months.
You can earn the PECB Certificate Holder in ISO/IEC 27001:2022 Foundation award after meeting its training, exam and application requirements. This is an individual certificate programme, not an organisation’s ISO 27001 certificate and not the full Lead Implementer or Lead Auditor credential.
PECB’s current maintenance policy exempts Foundation credentials from ongoing CPD and Annual Maintenance Fee requirements. This is separate from the course-completion attestation for 14 CPD credits. Ethical obligations and applicable issuer rules still matter.
The organisation establishes and operates an ISMS within an agreed scope, evaluates it and addresses gaps before an independent certification body makes its certification decision. Timing depends on readiness, scope, evidence and certification-body scheduling; buying this course does not set a company certification date.
Foundation is a useful starting point if the standard is new to you, but holding this certificate is not a mandatory prerequisite for the Lead courses. Lead Implementer expects general knowledge of ISMS concepts and ISO 27001; Lead Auditor expects ISO 27001 fundamentals and comprehensive audit-principles knowledge. Choose for your existing knowledge and intended work.
The original sample lesson, three knowledge checks and study map on this page are free to read. They are not a complete accredited course, official PECB exam questions or exam dumps, and do not award a certificate. The official course and assessment are paid learning products.
The listed English Self-Study and recorded eLearning options are online. Check your device and internet access against PECB’s current learning and exam requirements. For the separate consultancy package, agree availability and NZST/NZDT timing before booking. No physical classroom or onsite Academy training is offered.
PECB issues the Foundation certificate under its own certificate programme. Acceptance for a role or development plan is decided by the employer or other receiving organisation. No NZQA approval, NZQCF level equivalence, immigration eligibility or job outcome is claimed here.
Discuss employer-funded study or enterprise learning with Aegentra before booking. Confirm the billing entity, learner names, NZD package, applicable tax and invoice requirements. NZ tax treatment remains unconfirmed, so this draft does not promise that no GST will be charged.
Last updated . Public source facts checked for this draft. Final NZ commercial terms and human publication review remain pending.
Need help deciding between individual learning and organisational support? Discuss your requirements with Aegentra, or return to the Academy course catalogue.