PECB ISO 28000 Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified ISO 28000 Foundation credential is an entry-level certificate showing general knowledge of ISO 28000 requirements for a security management system (SeMS), and the ability to contribute to SeMS implementation projects. The associated training course presents the basic concepts and principles of security management and gives a general explanation of ISO 28000 requirements, covering top management commitment, security policy, security strategies, procedures, processes and treatments, performance evaluation, and continual improvement. It is intended for managers and consultants seeking knowledge about basic security management concepts and principles, professionals wishing to become acquainted with ISO 28000 requirements for a SeMS, individuals engaged in or responsible for security management activities in their organizations, and individuals wishing to pursue a career in security management. The two-day agenda runs from introduction to security management, the SeMS, and clauses 4-6 of ISO 28000 on day one, to clauses 7-10 and the certification exam on day two. The exam covers two competency domains, each weighted 50 percent: fundamental concepts and principles of security management and an SeMS based on ISO 28000, and ISO 28000 requirements for a security management system, clauses 4 to 10. There are no prerequisites. Preparation combines the participant-centered lectures, practical examples, participant interaction, and stand-alone quizzes, plus over 200 pages of instructional materials. Passing the exam allows you to apply for the certificate, which requires signing the PECB Code of Ethics and no professional experience.
What you'll study
About PECB ISO 28000 Foundation preparation
What does the exam cover?
The exam fully meets the requirements of the PECB Examination and Certification Program and covers two competency domains: Domain 1, fundamental concepts and principles of security management and an SeMS based on ISO 28000, and Domain 2, ISO 28000 requirements for a security management system, clauses 4 to 10. Each domain is weighted 50 percent.
Do I need experience or prerequisites to take the course or exam?
No. The source states there are no prerequisites to participate in the training course. For the certificate, the requirements are passing the PECB ISO 28000 Foundation exam and signing the PECB Code of Ethics; no professional experience, MS audit or assessment experience, or SCSMS project experience is required.
What happens if I fail the exam?
In case of exam failure, you can retake the exam within 12 months for free. The source does not state any limit on the number of attempts or any conditions attached to the free retake, so confirm the details in the PECB Examination Rules and Policies before you sit the exam.
How is the course structured over the two days?
Day 1 covers introduction to security management, the SeMS, and clauses 4-6 of ISO 28000. Day 2 covers clauses 7-10 of ISO 28000 and the certification exam. The educational approach is participant centered, with lectures illustrated by graphics and practical examples, interaction through questions and suggestions, and quizzes.
What study materials are provided?
PECB provides over 200 pages of instructional materials containing explanations, guidance, and practical examples. An attestation of course completion worth 14 CPD credits is issued. The quizzes with stand-alone questions are intended to prepare participants for the exam, so use them to identify weak clauses before exam day.
In what order should I study the material?
Follow the course agenda: first the fundamental concepts and principles of security management and the SeMS, then ISO 28000 clauses 4-6, then clauses 7-10. Domain 1 and Domain 2 are each weighted 50 percent, so do not neglect the concepts half in favor of memorizing clause requirements.
What are common failure modes?
The two domains are equally weighted, so candidates who focus only on clause-by-clause requirements and skip the concepts and principles risk losing half the marks. Treat the stand-alone quizzes as diagnostics, revisit the clauses behind every missed question, and review the practical examples in the 200-plus pages of materials.
Is this course still updated?
The source states that updates to this training course have been discontinued and that a new version might be available upon request, with requests directed to [email protected]. No effective date for a replacement version is given, so confirm with PECB which version you will be trained and examined on.
How much does the exam cost and how long does it take?
Certification and examination fees are included in the price of the training course. The source does not state a standalone exam fee, exam duration, question count, passing score, or certificate validity period; it refers readers to the List of PECB Exams and the Examination Rules and Policies for exam type, languages, and other details.