ISO 27001 Foundation Certification
An entry-level credential confirming understanding of the principles and requirements of ISO/IEC 27001:2022 and how an information security management system (ISMS) is built and run. It is for anyone new to the standard.
Why Take It
It gives someone joining an ISMS or certification project a shared vocabulary with auditors and implementers, and is the usual first step before the Internal Auditor, Lead Auditor or Lead Implementer paths.
Who It's For
- Professionals new to information security or ISMS work
- Compliance, governance and risk staff
- Team members taking part in an ISO 27001 certification project
- Cybersecurity staff who need to understand the standard
- Anyone wanting a grounding in ISO/IEC 27001:2022
What You'll Be Able to Do
- Explain the purpose and structure of ISO/IEC 27001:2022
- Describe the core principles of an ISMS
- Recognise the main requirements of the standard
- Understand how an ISMS is established and managed
- Use the standard's terminology accurately with colleagues and auditors
Exam and Credential
- Questions
- 40
- Time Allowed
- 60 minutes
- Format
- Multiple choice (one correct answer per question)
- Pass Mark
- 32/40 (80%)
- Delivery
- Online with remote proctoring; voucher valid 6 months from purchase
- Languages
- Spanish, English, Portuguese
- Retakes
- Each retake requires a separate voucher
- Digital Badge
- Yes
- Valid For
- 3 years
Prerequisites
None; no formal prerequisites are required.
Where This Sits in Cybersecurity, Resilience & ISMS
- 1I22301F™ISO 22301 Foundation CertificationFoundationCyber & ResilienceISO
- 2I22301A™ISO 22301 Internal Auditor Professional CertificationInternal AuditorCyber & ResilienceISO
- 3I22301LA™ISO 22301 Lead Auditor CertificationLeadCyber & ResilienceISO
- 4CSFPC™Cybersecurity Foundation Professional CertificationFoundationCyber & ResilienceNot an ISO Standard
- 5LCSPC™Lead Cybersecurity Professional CertificationLeadCyber & ResilienceNot an ISO Standard
- 6CEHPC™Ethical Hacking Professional CertificationProfessionalCyber & ResilienceNot an ISO Standard
- 7I27001F™ISO 27001 Foundation CertificationFoundationCyber & ResilienceISO
- 8I27001IA™ISO 27001 Internal Auditor CertificationInternal AuditorCyber & ResilienceISO
- 9I27001LI™ISO 27001 Lead Implementer CertificationLeadCyber & ResilienceISO
- 10I27001LA™ISO 27001 Lead Auditor CertificationLeadCyber & ResilienceISO