Applied AI & Cybersecurity

reconn is a PECB Authorized Titanium Partner
  1. Home
  2. Answers
  3. ISO 27001 certification cost

How much does ISO 27001 certification cost?

There is no standard fee. Here is what moves the number, and what a PECB credential costs.

Every great mission starts with reconn.

reconn.io/hello@reconn.io/+971 5857 26270

0Standard fees
1/3Surveillance audit days vs initial
2/3Re-assessment audit days vs initial
1Free exam retake in 12 months

There is no single price. ISO 27001 certification cost depends on the certification body and on the size and scope of your ISMS, and neither ISO nor PECB publishes a standard fee for it. Plan for the audits and for the work of building the ISMS. For a personal PECB credential, the exam fee is included in the course price.

Two different buyers ask this question, so it helps to split the answer.

For an organization

The certification body sets its own fees. They depend on your scope, sites and headcount. The cost is also not one payment: ANAB explains that certification includes annual surveillance audits and a re-assessment audit, normally in the third year. Under IAF guidance, surveillance audits total about one third of the initial audit days, and the re-assessment about two thirds.

The audit is only part of the cost. Building the ISMS, treating risks, training staff, running an internal audit and holding a management review all take time and often outside help.

From my side of the table. Ask at least two accredited certification bodies to quote against the same written scope, and ask what the surveillance and re-assessment years cost, not only the first audit.

For an individual

PECB states that certification and examination fees are included in the price of the course, and that a failed exam can be retaken within 12 months for free. At reconn, the PECB certification application fee and the first year's annual maintenance fee are included in every enrollment too. The price depends on the course and your market, with local VAT where it applies. See the Lead Implementer course page for today's price and any offer.

Ways to learn with reconn

I teach these courses myself as a PECB Certified Trainer, with more than 20 years in cybersecurity. I am a practitioner, not a slide reader.

Included with eLearning1 hour, 1-on-1A live online session with a PECB Certified Trainer, free with every self-paced, self-study and eLearning enrollment.
Included with eLearningUntil you passUnlimited email and WhatsApp support, directly with a trainer, within your 12-month enrollment window.

Want more structure? The eLearning+, Live Online Sprint, Live Online and Classroom packages add live teaching and extra benefits. Live Online Lead Auditor is planned from 2027, and you can contact me now to register interest.

Which PECB course fits your role?

Lead Implementer

Plan, build and run an ISMS to ISO/IEC 27001.

For people who build and run the ISMS.

View the course

Lead Auditor

Plan, run and report an ISMS audit.

For people who audit it.

View the course

Lead Implementer and Lead Auditor bundle

Both Lead courses together, in English.

For people who build the system and are also expected to check it.

See the bundle

Live Online Lead Implementer

Instructor-led and taught live by me.

For people who want a trainer and a fixed schedule.

View the course

Chief Information Security Officer

Lead the information security program across the organization.

For people moving from running an ISMS to leading security.

View the course

Frequently asked questions

How much does ISO 27001 certification cost?

There is no standard fee. The certification body sets its price based on your scope, sites and headcount, and the cost recurs through surveillance and re-assessment audits.

What do surveillance audits cost?

Under IAF guidance, surveillance audits total about one third of the initial audit days and the re-assessment about two thirds. Ask each certification body to quote those years too.

What does the PECB exam cost?

PECB states that certification and examination fees are included in the course price. A failed exam can be retaken within 12 months for free.

What else besides the audit adds to the cost?

Building the ISMS, treating risks, training staff, running an internal audit and holding a management review all take time and often outside help.

Sources

Back to blog