US ISO 27001 training
ISO 27001 Courses Online for US Security and Compliance Teams
Three official PECB ISO/IEC 27001 courses, self-paced online and priced in US dollars: Lead Auditor if you will audit an information security management system, Lead Implementer if you will build one, and Foundation if you want the standard's language before either.
Last reviewed 3 November 2026
PECB ISO 27001 courses, priced in US dollars
Every course is priced in US dollars and includes the PECB exam voucher, two exam attempts and the certification fee.
PECB Certified ISO/IEC 27001 Lead Auditor
US$442
Any applicable taxes are calculated at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. 31 CPD credits.
View course → Official PECB eLearningPECB Certified ISO/IEC 27001 Lead Implementer
US$442
Any applicable taxes are calculated at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. 31 CPD credits.
View course → Official PECB eLearningPECB Certificate Holder in ISO/IEC 27001 Foundation
US$163
Any applicable taxes are calculated at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee and 12 months of access. 14 CPD credits.
View course →Mindset Cyber is a PECB Authorized Titanium Partner, PECB's highest partner level. Learners from 40 countries have bought official PECB courses from Mindset Cyber.
Who certifies what: ISO 27001 in the US
An ISO/IEC 27001 certificate belongs to a company, not to a person. A certification body audits the company's information security management system and issues the certificate. An accredited certificate comes from a certification body accredited by ANAB, the accreditation body of ANSI, or by another signatory of the Global ACI MRA. ANAB runs its ISO/IEC 27001 program for those bodies under ISO/IEC 17021-1. The current edition is ISO/IEC 27001:2022, which ISO updated with Amendment 1:2024.
When a customer or a vendor shows you a certificate, you can check it. IAF CertSearch (iafcertsearch.org) is the database of accredited certificates, and Global ACI points to it from its “Verify Certificates” link. Not finding a certificate there does not prove it is invalid; the certification body named on it can confirm.
The courses on this page lead to something different: a credential for you, issued by PECB, which you keep whichever company you work for. Lead Implementer is the course for the person who gets an organization ready for that audit, and Lead Auditor for the person who plans and leads audits of an ISMS.
Are these ISO 27001 credentials accredited?
The two Lead credentials are. PECB certifies people under ISO/IEC 17024, which sets the requirements for bodies that certify people, and its accreditation from IAS (PCB-111, certificate valid to 1 January 2027), an accreditation body based in the US, covers PECB Certified ISO/IEC 27001 Lead Auditor and Lead Implementer. ISO/IEC 27001 Foundation is not on that scope: PECB issues it as its own certificate.
Two points are worth reading correctly. IAS accredits PECB's certification of you, not the course, which Mindset Cyber sells as an authorized PECB training partner. And PECB's ANAB accreditation is a different one, as a certificate issuer under ANSI/ASTM E2659-24, so these credentials are IAS-accredited, not ANAB-accredited.
The ISO 27001 exams compared
Whichever course you choose, the price covers your first exam attempt and a second one if you need it.
| Course | Exam | Study |
|---|---|---|
| Lead Auditor | 3 hours, open book, 80 multiple choice questions, 70% to pass | 450+ pages, around 30 to 40 hours of study |
| Lead Implementer | 3 hours, open book, 80 multiple choice questions, 70% to pass | 450+ pages, around 30 to 40 hours of study |
| Foundation | 1 hour, closed book, 40 multiple choice questions, 70% to pass | 200+ pages, around 10 to 15 hours of study |
All three are sat online under remote proctoring, in a scheduled myPECB session you book when you are ready. The two Lead exams are open book, so a printed copy of ISO/IEC 27001, your course materials and your notes can all be on the desk; Foundation is closed book.
You can sit either Lead exam with no experience. Pass without it and PECB issues a Provisional credential; the full credential follows on the same result once you have the experience. Lead Auditor asks for five years of work experience, two in information security, and 300 hours of audit activities. Lead Implementer asks for five years, two in information security management, and 300 hours of ISMS project activities.
Frequently asked questions
Which of the three ISO 27001 courses is for me?
Choose by the work in front of you. Lead Implementer suits the person who will build the information security management system and steer the company to its certification audit. Lead Auditor suits internal auditors, vendor risk teams and anyone aiming for a seat on a certification audit team. Foundation suits people who support the ISMS or want the requirements before a Lead course, the eLearning equivalent of five days of training; neither Lead course requires it first.
Is PECB ISO 27001 certification accredited in the US?
The Lead Auditor and Lead Implementer credentials are. PECB holds an ISO/IEC 17024 accreditation from IAS (PCB-111), an accreditation body based in the US, and the scope names both; Foundation is not on it. What IAS accredits is PECB's certification of you, not the course. Do not read it as ANAB accreditation either: PECB's ANAB accreditation is for certificate programs, under ANSI/ASTM E2659-24.
Does an ISO 27001 course certify my company?
No. The course leads to a PECB credential for you, once you pass the exam. Your company's ISMS is certified by a certification body after an audit, and for an accredited certificate that body is accredited by ANAB or another Global ACI MRA signatory. Lead Implementer prepares you to get the company ready for that audit; Lead Auditor teaches you how such audits are planned, led and closed.
How do I check a vendor's ISO 27001 certificate?
Look it up on IAF CertSearch (iafcertsearch.org), the database of accredited certificates. If you cannot find it, ask the certification body named on the certificate before drawing conclusions, because an absent entry does not on its own make a certificate invalid. Check the edition too: the current edition is ISO/IEC 27001:2022, which ISO amended in 2024.
What do the ISO 27001 courses cost in the US?
Lead Auditor is US$442, Lead Implementer is US$442 and Foundation is US$163. All three cover the PECB exam voucher, two attempts at the exam, the certification fee and 12 months of access; the two Lead prices also cover your first year of PECB certification maintenance. Any applicable taxes are calculated at checkout.
Sources
Every source was read on 3 November 2026. Quotations keep their original spelling.
- ANAB, ISO/IEC 27001 Information Security Management Systems accreditation: https://anab.ansi.org/accreditation/iso-iec-27001-information-security/
- ISO, ISO/IEC 27001:2022 Information security management systems, with Amendment 1:2024: https://www.iso.org/standard/27001
- IAF CertSearch, the database of accredited certificates: https://www.iafcertsearch.org/
- Global ACI, home page and its Verify Certificates link: https://global-aci.org/en/home/
- IAS, Certificate and Scope of Accreditation PCB-111, PECB (effective 30 October 2025): https://www.iasonline.org/wp-content/uploads/2017/05/PCB-111-Cert.pdf
- PECB, Accreditations and Affiliations: https://pecb.com/en/accreditations