UK ISO 27001 training
ISO 27001 Training Courses for UK Information Security Professionals
PECB's ISO/IEC 27001 eLearning at three levels, priced in pounds with the exam in the price. Choose Lead Implementer if you will build the information security management system, Lead Auditor if you will audit one, or Foundation if the standard is new to you.
Last reviewed 3 November 2026
The three PECB ISO 27001 courses and their UK prices
Every course is priced in pounds and includes the PECB exam voucher, two exam attempts and the certification fee.
PECB Certified ISO/IEC 27001 Lead Auditor
£326 + VAT
UK customers pay 20% VAT, added at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. 31 CPD credits.
View course → Official PECB eLearningPECB Certified ISO/IEC 27001 Lead Implementer
£326 + VAT
UK customers pay 20% VAT, added at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee, the first year of PECB certification maintenance and 12 months of access. 31 CPD credits.
View course → Official PECB eLearningPECB Certificate Holder in ISO/IEC 27001 Foundation
£116 + VAT
UK customers pay 20% VAT, added at checkout.
Includes the PECB exam voucher, two exam attempts, the certification fee and 12 months of access. 14 CPD credits.
View course →Mindset Cyber is a PECB Authorised Titanium Partner, PECB's highest partner level. Learners from 40 countries have bought official PECB courses from Mindset Cyber.
Two certificates: your organisation's and yours
Certification bodies issue organisations their ISO/IEC 27001 certificates, after a Stage 1 and a Stage 2 audit of the information security management system. UKAS accredits those bodies. The government appointed it under the Accreditation Regulations 2009 as the sole national accreditation body for the UK, and it judges each ISO/IEC 27001 certification body against two standards: ISO/IEC 17021-1 for certifying management systems in general, and ISO/IEC 27006-1:2024 for certifying an ISMS in particular.
The edition matters when you read a supplier's certificate. The transition from ISO/IEC 27001:2013 closed on 31 October 2025, and any certificate still on the 2013 edition expired or was withdrawn at that point, so organisations are now certified to ISO/IEC 27001:2022.
Cyber Essentials is a separate matter: an NCSC scheme with an assessment of its own, delivered through IASME as the NCSC's Delivery Partner. Our ISO 27001 Lead Implementer page sets the two side by side.
People are certified separately, and that is where these courses lead. A PECB credential is issued to you rather than to your employer, so it stays with you when you change jobs. Lead Implementer and Lead Auditor prepare you for the two roles around a certification, building the ISMS and auditing it, while Foundation gives you the standard's vocabulary and structure before either.
What is accredited, and what is not
PECB, the body that examines you and issues the credential, is accredited under ISO/IEC 17024, the international standard for certifying persons. Two accreditation bodies list its ISO/IEC 27001 Lead Implementer and Lead Auditor certifications: UKAS, on PECB's schedule no. 21923 (issue 7, 27 August 2026), and IAS, a US accreditation body, in PECB's scope (PCB-111, certificate valid to 1 January 2027).
That accreditation attaches to PECB's certification of you. It does not make a training course accredited, and Mindset Cyber's own standing is that of an authorised PECB training partner. ISO/IEC 27001 Foundation is a PECB certificate too, but it appears on neither list.
A certification body hiring auditors makes its own judgement. ISO/IEC 17021-1 and ISO/IEC 27006-1:2024 require each body to set competence criteria for its auditors and to evaluate them against those criteria, so the PECB Lead Auditor credential counts as evidence of your training and exam result rather than an automatic place on an audit team.
The three exams side by side
Each price covers two exam attempts. You sit the exam online with a remote proctor, in one of the sessions you book in myPECB. The two Lead exams are open book: you can refer to a printed ISO/IEC 27001, your notes and the course materials.
| Course | Exam | Study |
|---|---|---|
| Lead Auditor | 3 hours, open book, 80 multiple choice questions, 70% to pass | About 30 to 40 hours, 450+ pages |
| Lead Implementer | 3 hours, open book, 80 multiple choice questions, 70% to pass | About 30 to 40 hours, 450+ pages |
| Foundation | 1 hour, closed book, 40 multiple choice questions, 70% to pass | About 10 to 15 hours, 200+ pages |
Frequently asked questions
Which ISO 27001 course is right for me?
It depends on your part in the ISMS. Lead Implementer suits IT and security managers, compliance leads and consultants who build an information security management system and take it to certification. Lead Auditor suits internal auditors, supplier assurance teams and anyone aiming for a place on a certification body audit team. Foundation suits ISMS project team members, stakeholders and newcomers to information security, and it is a natural first step before either Lead course.
Are the PECB ISO 27001 certifications UKAS accredited?
The two Lead certifications are. UKAS (no. 21923) accredits PECB under ISO/IEC 17024 to certify people, and PECB's UKAS schedule (issue 7, 27 August 2026) names PECB Certified ISO/IEC 27001 Lead Implementer and Lead Auditor. IAS, a US accreditation body, lists both in PECB's scope as well (PCB-111). What is accredited is PECB's certification of you; the course is not. ISO/IEC 27001 Foundation is a PECB certificate that neither UKAS nor IAS lists for PECB.
Do I have to take Foundation before a Lead course?
No. You can enrol in Lead Implementer or Lead Auditor, and sit its exam, without Foundation and without prior experience. Once you pass, PECB issues a Provisional Implementer or Provisional Auditor credential with no experience needed, and the higher levels follow on the same exam result as you add work experience and project or audit hours.
Can my employer pay for the course tax-free?
Yes, where the training is work-related. HMRC treats work-related training that an employer pays for, including exam fees, as non-taxable for the employee, as its helpsheet HS207 sets out.
How much are the ISO 27001 courses in the UK?
Lead Auditor and Lead Implementer are £326 + VAT each, and Foundation is £116 + VAT. Every price includes the PECB exam voucher, two exam attempts and the certification fee, and the two Lead courses add the first year of PECB certification maintenance. UK customers pay 20% VAT, added at checkout.
Sources
Every source was read on 3 November 2026. Quotations keep their original spelling.
- UKAS, Schedule of Accreditation 21923, PECB Group Inc., issue 007 (27 August 2026): https://www.ukas.com/download-schedule/21923/Personnel
- IAS, Certificate of Accreditation and scope, PECB, PCB-111 (effective 30 October 2025): https://www.iasonline.org/wp-content/uploads/2017/05/PCB-111-Cert.pdf
- GOV.UK, MoU between the Department for Business and Trade and UKAS (updated 28 July 2026): https://www.gov.uk/government/publications/mou-between-dbt-and-ukas
- UKAS, Certification body accreditation: standards for certification bodies, including ISO/IEC 27006-1:2024: https://www.ukas.com/accreditation/standards/certification-body-accreditation/
- IAF (archived; ceased operations on 1 January 2026), Changes in the scope of the IAF MLA: ISO/IEC 27001:2022 transition deadline: https://iaf.nu/en/changes-in-the-scope-of-the-iaf-mla-during-2024-2025/
- IAF MD 26:2023, Transition requirements for ISO/IEC 27001:2022, issue 2: https://iaf.nu/iaf_system/uploads/documents/IAF_MD26_Issue_2_15012023.pdf
- NCSC, Cyber Essentials help and resources (requirements v3.3 from 27 April 2026): https://www.ncsc.gov.uk/cyberessentials/resources
- HMRC, HS207 Non-taxable payments or benefits for employees (6 April 2026): https://www.gov.uk/government/publications/non-taxable-payments-or-benefits-for-employees-hs207-self-assessment-helpsheet