PECB ISO 28000 LI

It covers seven competency domains: fundamental principles and concepts of an SeMS, initiation of an SeMS implementation, planning of an implementation based on ISO 28000, implementation based on ISO 28000, evaluation of SeMS performance, continual improvement, and preparation for an SeMS certification audit. PECB publishes exam types, available languages, and other details in its List of PECB Exams and Examination Rules and Policies.

Day 1 covers introduction to ISO 28000 and initiation of an SeMS implementation; Day 2 the implementation plan of an SeMS; Day 3 implementation of an SeMS; Day 4 SeMS monitoring, continual improvement, and preparation for the certification audit; Day 5 is the certification exam. The course uses quizzes after each section plus scenario-based quizzes at the end of each day.

You can retake the exam once for free within 12 months following the initial exam date. Plan your schedule so the retake falls inside that window, and use the first attempt's result to target the domains where you scored weakest before booking the second sitting.

No. Certification and examination fees are included in the price of the training course. PECB also states that participants who attend the training course receive an attestation of course completion worth 31 CPD credits, and that over 500 pages of instructional materials are provided. Contact PECB support for anything not covered on the course page.

Four options exist. Provisional Implementer requires no experience. Implementer requires two years, including one year of work experience in Supply Chain Security Management, plus 200 hours of project activities. Lead Implementer requires five years, including two years in that field, plus 300 hours. Senior Lead Implementer requires ten years, including seven years, plus 1,000 hours. All require signing the PECB Code of Ethics.

Activities must follow best implementation practices and include drafting an SeMS implementation plan, initiating an SeMS implementation project, managing or leading such a project, implementing an SeMS, managing documented information, evaluating SeMS performance, and performing continual improvement activities. Keep evidence for each category, since the hours are assessed against this list rather than against general security work.

PECB states that participants should have a basic knowledge of ISO 28000 requirements, and that a general understanding of security management principles and concepts can also facilitate the learning process. If you are new to the standard, review its requirements before Day 1 so the planning and implementation days build on familiar terminology rather than first-time reading.

Follow the course sequence: concepts and initiation first, then planning, then implementation, then performance evaluation and continual improvement, and finish with certification audit preparation. Domains 1 and 2 supply vocabulary and mandate; domains 3 and 4 carry the most technical content; domains 5 to 7 assume you already know what was implemented.

Treating ISO 28000 as a checklist instead of a management system, confusing evaluation of performance with continual improvement, and being unable to describe how an organization is prepared for a third-party certification audit. Scenario-based questions reward people who can sequence activities and justify decisions, so practise explaining why a step comes before another.

PECB states that updates to this training course have been discontinued and that a new version might be available upon request, which should be made through [email protected]. Confirm with PECB which version you will receive before enrolling, particularly if you are studying against a specific edition of the standard.