orbit by reconn.Quick answers on ISO 27001 and information security
What are the prerequisites and experience requirements for ISO 27001 Lead Implementer?
One prerequisite to attend, and a separate experience record for the credential.
- By Shenoy
- Updated
Every great mission starts with reconn.
PECB lists general knowledge of ISMS concepts and ISO/IEC 27001 as the prerequisite for the Lead Implementer course. Experience is a separate matter that sets your credential, not your eligibility for the exam. Lead Implementer needs five years of experience, two in information security management, plus 300 project hours. With none, you earn Provisional Implementer.
It helps to separate two questions: what you need to attend, and what you need to hold the credential.
To attend the course
You should know the basic ideas of an ISMS and have a general grasp of ISO/IEC 27001. If it is new to you, the two-day Foundation course has no prerequisites and is a good first step.
To hold the credential
Every level requires the exam and signing the PECB Code of Ethics. Experience then decides which one you receive.
| Credential level | Work experience | Project or audit hours |
|---|---|---|
| Provisional (Implementer or Auditor) | None | None |
| Implementer or Auditor | 2 years, 1 in information security management | 200 hours |
| Lead Implementer or Lead Auditor | 5 years, 2 in information security management | 300 hours |
| Senior Lead Implementer or Senior Lead Auditor | 10 years, 7 in information security management | 1,000 hours |
Practitioner note: Many people take the course first and build the record afterward. Keep a simple log of ISMS project work with dates, your role and the result.
Start with reconn
You can enroll in PECB ISO 27001 Lead Implementer without prior implementation experience, and the free 1-on-1 session with a PECB Certified Trainer is a good place to plan your path.