— verify Aegentra in the PECB partner directory (opens in a new tab)Official PECB training partner
Learn to plan, implement and improve an ISO/IEC 27001:2022 information security management system. Study online with official PECB Self-Study materials or recorded eLearning, with practical Aegentra consultancy training available.
Draft starting price NZ$1,050.00per learner · Self-Study · before applicable tax
Compare formats & pricesPECB Partner ID 232290 · Verify our listing
Course, exam and professional certification are distinct steps. After passing, you may apply for the credential tier whose requirements you meet.
Your learning format
Self-Study uses reading and exercises. Recorded eLearning adds PECB video-led content. The two-hour consultancy option is a separate practical session, not a full live PECB course.
PECB’s partner-package policy includes the first exam, one free retake, the certification application and the first year of the Annual Maintenance Fee (AMF) within its required cycle. These inclusions must be confirmed for the final NZ booking. Read the current exam rules.
Aegentra Academy training is online only. No physical classroom or onsite Academy training is offered.
At a glance
Checked against the PECB course outline, current English exam listing and candidate handbook. The 12-month cycle is not a statement about material-access duration.
Who this course suits best
A general understanding of ISMS concepts and ISO/IEC 27001 is expected. If these ideas are new, start with ISO 27001 Foundation before deciding whether the Lead Implementer pathway fits.
The investment makes most sense when the learning matches your responsibilities. It does not guarantee employment, a promotion, a professional credential or organisational certification.
What you will learn
The four study modules below summarise the published training-day sequence. Self-paced learners set their own timetable; the exam listed on Day 5 is not a fifth day of teaching.
Connect business needs and interested parties to an ISMS scope, leadership responsibilities and information security policy.
Organise the project, assess information risks and decide how to treat them. Understand the role of the Statement of Applicability.
Turn planned measures into operating controls, documented responsibilities, staff awareness and usable records.
Use monitoring, internal audits and management review to identify corrective actions and prepare for an independent certification audit.
Short summaries, not a replacement for the official syllabus and candidate handbook.
Exam and professional certification
Three hours, 80 multiple-choice questions, open book and a 70% pass mark. Prepare for scenarios as well as standalone questions. Only PECB-permitted reference materials may be used; check the exam rules and technical requirements before booking an online sitting.
The first retake requires a 15-day wait after failure. The included Self-Study/eLearning cycle ends 12 months after purchase; a failed attempt does not reset that deadline.
After passing, submit your certification application and evidence of the experience required for your tier. Each tier also requires the exam or an accepted equivalent and compliance with PECB’s Code of Ethics.
Course attendance, exam success and a professional certification are separate outcomes. The Lead Implementer course title does not mean every learner can immediately use the Lead Implementer credential.
| Credential tier | Professional experience | ISMS project activity |
|---|---|---|
| Provisional Implementer | No professional experience requirement | None |
| Implementer | 2 years overall, including 1 in information security management | 200 hours |
| Lead Implementer | 5 years overall, including 2 in information security management | 300 hours |
| Senior Lead Implementer | 10 years overall, including 7 in information security management | 1,000 hours |
Requirements summarised from the PECB credential table. PECB assesses the application; this page does not decide eligibility.
After certification: the Lead Implementer credential has a three-year maintenance cycle, currently requiring 90 CPD hours, applicable maintenance fees and ethical compliance. The 31 course CPD credits listed for attendees are not the full maintenance requirement. Check PECB’s maintenance policy for your tier.
Applying the learning in New Zealand
An ISMS provides a way to organise risk ownership, controls and evidence. The connections below explain why that learning can be useful in NZ work; they are not formal equivalence or approval claims.
NCSC’s New Zealand Information Security Manual addresses government information assurance and systems security, including work with agencies and their suppliers. Risk assessment and control-evidence skills are relevant, but ISO 27001 training does not establish NZISM conformity or system accreditation.
NCSC: NZISMPSR covers more than information security. An ISMS can help organise responsibilities and review, while applicable personnel, physical, governance and ICT assurance requirements still need their own assessment.
PSR: information securityIPP 5 requires safeguards reasonable in the circumstances for personal information. Access management, supplier safeguards and risk treatment can support that work. An ISO certificate or course credential is not proof of compliance with the Privacy Act.
Privacy Commissioner: IPP 5Check the buyer’s actual preconditions, the service and legal entity in scope, and any required certification or assurance. An individual course credential is not an organisation’s ISO certificate, and neither guarantees tender acceptance. NZ Government Procurement: preconditions.
A practical learning example
A fictional NZ software provider, one access risk and the records that connect them. This is original teaching material, not an exam question, client case study or complete implementation template.
Illustrative scenario: a New Zealand software provider operates a customer-support portal. Start by identifying the legal entity, portal service, people, hosting and suppliers involved. A certificate for a different entity or service would not resolve this scope question.
A useful scope says what is included and explains the boundary. It is not a list of standards the organisation wants to mention.
Illustrative risk-register entry: a former staff member retains privileged portal access and can retrieve customer records. The team assesses the likelihood and impact using its own method, then records a treatment owner and a due date.
No universal score is supplied. Risk criteria, priorities and acceptance decisions belong to the organisation.
Illustrative Statement of Applicability working note: record why an access-control measure is necessary, whether it has been implemented and where supporting evidence can be found. The final SoA must address the applicable Annex A controls and justify inclusions and exclusions.
This is a teaching example, not a complete SoA, audit finding, legal opinion or certification-ready template.
Context: IPP 5 and an ISO-hosted SoA practices note (informative guidance, not the normative standard). Nothing is saved or sent; no risk score or credential decision is produced.
Choose for the work you want to do
Focus on building and operating the management system: scope, policy, risk treatment, ownership, monitoring and improvement. A useful fit when you are responsible for putting the ISMS in place.
Compare this course’s formatsFocus on planning and conducting an audit, evaluating evidence and communicating findings. A different pathway if independent assessment and auditing are your main responsibilities.
Explore the Lead Auditor courseSeparate exam preparation
Add 12 months of Aegentra Labs access to Self-Study or recorded eLearning for NZ$120.00, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course. Original practice questions and explanations support study; they are not official PECB exam questions, exam dumps or a substitute for the syllabus.
Before you decide
Yes. Optional Aegentra Labs access is NZ$120.00 for 12 months with either Self-Study or recorded PECB eLearning. The combined price is NZ$1,170.00 with Self-Study or NZ$1,190.00 with eLearning, before applicable tax. 10-day money-back guarantee if you’re not satisfied with Aegentra Labs. Applies to the Labs add-on, not the PECB course. Labs is separate exam preparation, not official PECB exam content or a guarantee of passing.
The website preview shows NZ$1,050.00 per learner for Self-Study and NZ$1,070.00 for recorded PECB eLearning, before applicable tax. These are fixed NZD prices; tax and final checkout totals require confirmation before bookings open. The two-hour consultancy-training package is priced separately and is still to be confirmed.
PECB’s current handbook describes the partner training package as including the first exam, one free retake, the certification application and the first year of the Annual Maintenance Fee (AMF). The included certification cycle must be completed within 12 months; for Self-Study and eLearning the clock starts on purchase. We will confirm the applicable NZ package and voucher terms before opening bookings.
This page does not quote a standalone exam-only fee. Ask for a separate written quote if you do not need the course materials; do not assume the course price is the exam-only price.
It tests application of ISMS concepts as well as knowledge of the standard. Work through the official materials, practise scenario reasoning and learn to navigate the permitted references. Open-book does not mean unrestricted internet use, and no pass outcome is guaranteed.
PECB expects a general understanding of ISMS concepts and ISO/IEC 27001, rather than listing Foundation certification as a mandatory prerequisite. Foundation can be a more suitable starting point if those concepts are new to you. Passing the Lead Implementer exam does not waive the experience requirements for a professional credential.
The PECB syllabus is organised as four training days with the exam listed separately on Day 5 in its taught-course agenda. Self-Study and recorded eLearning are self-paced, so that agenda is not a promise of completion in five calendar days. Your preparation time depends on your experience and the time you allow for exercises and revision.
The proposed NZ options are online and do not require travel to a classroom. Self-Study and recorded eLearning let you plan your study around work. Any two-hour consultancy session will have its date, time zone, consultant and scope confirmed before booking.
No. It is practical Aegentra consultancy training alongside the chosen official PECB course, focused on applying the standard in an organisation. It is not a replacement for the full syllabus, an exam or an organisational implementation engagement.
This page describes a PECB professional certification pathway and makes no claim of an NZQA-approved qualification or NZ qualifications-framework level. Employers and procurement teams decide which evidence they accept. Check a specific qualification requirement with the organisation requesting it before purchasing.
A person can pursue a PECB professional credential, subject to the exam, application, experience and ethical requirements for the chosen tier. An organisation’s ISO/IEC 27001 management-system certificate is a separate outcome of an independent certification process. Neither a course completion record nor a personal credential certifies your employer.
PECB’s included partner-package cycle provides one free retake within its 12-month window, which starts on purchase for Self-Study and eLearning. Retake scheduling and waiting rules still apply; failing the exam does not start a new 12-month window. Confirm the voucher deadline and current PECB policy before scheduling.
The official PECB course is not offered free here. Aegentra Labs is a separate practice platform; check it for current free and paid resources. Practice questions are not the official exam, do not award a PECB credential and must not be confused with exam dumps.
Employer booking, invoice details and NZ tax treatment must be confirmed before bookings open. We have not approved a no-GST claim or a final tax-inclusive total for this preview. Ask for the learner names, billing entity, currency and all inclusions to be recorded in the written booking confirmation.
Last updated . Public source facts checked for this draft; Aegentra’s final NZ commercial terms and human publication review remain pending.
Do you need organisational implementation support rather than a personal training course? Explore Aegentra’s governance services or discuss your learning requirements.