30%

growth in ISO/IEC 27001 certificates worldwide in 2025, to 125,622. ISO Survey 2025.

PECB ISO/IEC 27001 Foundation certification

27001 Is Everywhere.
Speak It.

More organisations certify to ISO/IEC 27001 every year, and each one needs people who understand what it asks. Get that grounding in two days, with a certificate that never expires.

HRD Corp claimableYayasan Peneraju: may be eligibleClassroom, online or e-learning

Exam

PECB Foundation

Course

2 days

Classroom

RM4,500

E-learning

RM1,800

Next intake

22-23 Feb 2027

Quick answer

What is ISO/IEC 27001 Foundation?

PECB ISO/IEC 27001 Foundation is an entry-level certificate in the world’s best-known standard for information security management. It shows you understand the concepts, principles and requirements of an information security management system (ISMS) under ISO/IEC 27001:2022. No experience is needed, and the certificate does not expire.

Exam facts verified against pecb.com on 22 Oct 2026

FOR

Managers, consultants, IT, risk and compliance staff

LEADS TO

ISO/IEC 27001 Lead Implementer or Lead Auditor

SKIP IF

You already lead ISMS projects. Go straight to Lead Implementer

01

The Credential

What you study and sit to earn it.

Complete the two-day course, pass the one-hour exam on day 2 and sign the PECB Code of Ethics. You then hold the PECB Certificate Holder in ISO/IEC 27001:2022 Foundation credential.

COURSE

2 days, exam on day 2

MATERIALS

200+ pages, practical examples

EXAM

1 hour, free retake

CREDENTIAL

PECB Certificate Holder

Awarded by

PECB

Level

Foundation, no experience needed

Standard

ISO/IEC 27001:2022

Validity

Does not expire

Annual fee

None

CPD

14 credits for attendance

02

Decide in 60 Seconds

Four options people compare.

If you want to

Choose

Why

Understand what ISO/IEC 27001 asks of your organisation

→

ISO/IEC 27001 Foundation

Two-day grounding in ISMS concepts and requirements

Lead an ISMS implementation

→

ISO/IEC 27001 Lead Implementer

Five days on planning, building and running an ISMS

Audit an ISMS

→

ISO/IEC 27001 Lead Auditor

Five days on auditing against ISO/IEC 27001

Build hands-on technical security skills

→

CompTIA Security+

Core security skills that apply to any vendor’s tools

Is ISO/IEC 27001 Foundation your starting point?
0/4

Tick what applies. 3 or 4: Foundation is the right start. Fewer: a technical path such as Security+ may suit you better.

03

What the Exam Covers

The two competency domains PECB examines.

2 competency domainsStandard: ISO/IEC 27001:2022

Domain 1

Fundamental Principles and Concepts of an ISMS

  • Core ISMS concepts, principles and definitions
  • How information security is managed as a system
  • Methods for implementing and managing an ISMS

Domain 2

Information Security Management System (ISMS)

  • The main ISO/IEC 27001:2022 requirements
  • Policy, procedures and management commitment
  • Performance measurement, internal audit and management review
  • Continual improvement

Source: PECB ISO/IEC 27001 Foundation course page and brochure. PECB does not publish domain weightings.

04

What the Course Covers

Two days: concepts first, then requirements and your exam.

Two days of instructor-led PECB training on ISO/IEC 27001:2022. Day 1 builds the concepts; day 2 walks through the requirements and ends with the certificate exam.

Day 1

ISMS Concepts

  • Information security and ISMS concepts
  • Principles and definitions in ISO/IEC 27001:2022
  • How an ISMS is implemented and managed

Day 2

ISMS Requirements

  • ISMS policy and procedures
  • Management commitment
  • Performance measurement
  • Internal audit and management review
  • Continual improvement
  • Certificate exam, one hour

200+

pages of PECB training material with practical examples, plus practice tests similar to the exam.

05

Why Now

Global adoption, local readiness, and why train with us.

30%

growth in ISO/IEC 27001 certificates worldwide in 2025

ISO Survey 2025

125K

ISO/IEC 27001 certificates valid worldwide at the end of 2025, up from 96,709

ISO Survey 2025

3%

of Malaysian organisations reach a Mature level of cyber readiness

Cisco Cybersecurity Readiness Index 2025

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. An information security management system is how organisations meet duties like these, and ISO/IEC 27001 is the standard for building one.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

PECB Authorized Gold Partner

Delivering PECB’s official ISO/IEC 27001 Foundation course

Exam included

Fee covers training, exam and certificate

HRD Corp registered

This course is HRD Corp claimable

Three ways to learn

In class in KL, live online, or self-paced e-learning

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Two-day course, KL or live onlineRM4,500

Self-paced e-learningRM1,800

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Exam, certificate and one free retake

Included

Dates

Where

Fee

Thu 5 to Fri 6 Nov 2026

Kuala Lumpur or online

RM4,500 incl. exam

Mon 22 to Tue 23 Feb 2027

Kuala Lumpur or online

RM4,500 incl. exam

Thu 8 to Fri 9 Apr 2027

Kuala Lumpur or online

RM4,500 incl. exam

Wed 9 to Thu 10 Jun 2027

Kuala Lumpur or online

RM4,500 incl. exam

Mon 2 to Tue 3 Aug 2027

Kuala Lumpur or online

RM4,500 incl. exam

Prefer your own pace? Self-paced e-learning on the myPECB platform is RM1,800 with the exam included, available 24/7, and you sit the exam online when you are ready. See the e-learning course.

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certificate

PECB Certificate Holder in ISO/IEC 27001:2022 Foundation

Exam duration

1 hour

When

Day 2 of the course, or online at a time you choose with e-learning

Languages

Several; see PECB’s list of exams

Retake

Free within 12 months if you do not pass

Requirements

Complete the course, pass the exam, sign the PECB Code of Ethics

Exam fee

Included in the course fee

NO EXPIRY

Yours for good

PECB Foundation certificates do not expire and carry no annual maintenance fee.

NEXT MOVE

Step up to Lead

Lead Implementer and Lead Auditor credentials need professional experience and are maintained every three years.

FAQ

Questions People Ask

What is ISO/IEC 27001 Foundation?

It is PECB’s entry-level certificate in ISO/IEC 27001, the international standard for information security management. It shows you understand the concepts, principles and requirements of an information security management system under ISO/IEC 27001:2022.

No. PECB requires no professional, audit or ISMS project experience for the Foundation certificate.

At Trainocate Malaysia the two-day course is RM4,500 per person in Kuala Lumpur or live online, or RM1,800 for self-paced e-learning. Both include the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

No. PECB Foundation certificates do not expire and have no annual maintenance fee.

Foundation teaches the concepts and requirements of ISO/IEC 27001. Lead Implementer prepares you to plan and run an ISMS, and Lead Auditor prepares you to audit one. Both Lead courses run for five days.

The course and exam are based on ISO/IEC 27001:2022, the current version of the standard.

You can retake the exam once for free within 12 months of your first attempt.

Speak the Standard

Pick an intake or e-learning. An advisor confirms your seat, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 22-23 Feb 2027

  • RM4,500 classroom, or RM1,800 e-learning, exam included

Sources

  1. PECB: ISO/IEC 27001 Foundation
  2. PECB: ISO/IEC 27001 Foundation brochure (PDF)
  3. PECB: ISO/IEC 27001 Foundation one-pager (PDF)
  4. PECB: Certification maintenance policy (PDF)
  5. PECB: ISO/IEC 27001 Lead Implementer brochure (PDF)
  6. PECB: ISO/IEC 27001 Lead Auditor brochure (PDF)
  7. PECB: ISO/IEC 27001 Lead Implementer candidate handbook (PDF)
  8. DQS: ISO Survey 2025 results
  9. ISO: The ISO Survey
  10. Trainocate: PECB-27001F course outline
  11. Trainocate: PECB-27001F-EL e-learning course
  12. Cisco 2025 Cybersecurity Readiness Index, Malaysia findings (via Cybersecurity Asia)
  13. NACSA: Cyber Security Act 2024 (Act 854)
  14. MAICSA: Act 854 regulations summary