PECB ISO 28000 Transition
PECB Certified ISO 28000 Transition
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified ISO 28000:2022 Transition credential is a short, focused qualification for people who already work with ISO 28000 and need to move from the 2007 edition to the 2022 edition. The standard was published in March 2022 and now follows the harmonized structure of ISO, with security management system (SeMS) requirements set out in clauses 4 to 10, which makes integration with other ISO-based management systems easier. Its title also changed from Specification for security management systems for the supply chain to Security and resilience – Security management systems – Requirements, signalling that the requirements apply to all organizations, not only those in the supply chain. The course suits individuals keeping up to date with ISO 28000, those responsible for transitioning an SeMS, and managers, trainers, and consultants who maintain one. The exam is built on two competency domains: the differences between the main clauses of the 2022 and 2007 editions, and understanding, interpreting, and planning the implementation of the 2022 changes. Preparation is a two-day course, delivered as lecture sessions illustrated with quizzes that mirror the certification exam structure, with materials of over 120 pages and 14 CPD credits on attendance. No professional experience, audit experience, or project experience is required for the credential; signing the PECB Code of Ethics is the only other requirement. This page is independent study support and is not affiliated with PECB.
What you'll study
About PECB ISO 28000 Transition preparation
What does the ISO 28000 Transition exam actually test?
Two competency domains. Domain 1 covers the differences between the main clauses of ISO 28000:2022 and ISO 28000:2007. Domain 2 covers understanding, interpreting, and planning the implementation of the 2022 changes. Expect clause-by-clause comparison and questions on new concepts, requirements, and terminology rather than general security theory.
Do I need professional experience to get the credential?
No. The PECB Certified ISO 28000:2022 Transition credential lists no professional experience, no MS audit or assessment experience, and no SCSMS project experience. The only other requirement is signing the PECB Code of Ethics. You still have to pass the exam first, then apply for the credential.
What is the exam format?
The source confirms the exam is multiple-choice in style only indirectly: the course quizzes have a structure similar to the certification exam. For specific details on exam type, available languages, and other exam information, PECB directs candidates to its List of PECB Exams and the Examination Rules and Policies, so check those before booking.
How long is the course and how is it structured?
Two days. Day 1 introduces ISO 28000:2022 and compares it to ISO 28000:2007. Day 2 is a clause-by-clause comparison between the two editions, followed by the certification exam. The approach is theory plus best practices used in transitioning an SeMS, with lecture sessions illustrated by quizzes.
Can I retake the exam if I fail?
Yes, under one condition. Candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial exam date. If you did not attend the course, or you need a second retake, contact PECB support for the applicable terms.
Are exam and certification fees extra?
No. Certification and examination fees are included in the price of the training course. That covers the exam sitting and the certificate once you meet the credential requirements. Materials of over 120 pages, including practical examples and quizzes, are also provided as part of the course.
What study order works best?
Start with the structural change: the 2022 edition follows ISO's harmonized structure, with SeMS requirements in clauses 4 to 10. Then work clause by clause against the 2007 text, noting new, revised, and removed requirements and new terminology. Finish with planning: how you would sequence and justify the transition changes in a real SeMS.
What are common failure modes?
Treating it as a general ISO 28000 course instead of a delta course. Candidates lose marks by memorizing the 2022 clauses without being able to say what changed and why, or by confusing the old supply-chain scope with the broader 2022 applicability. Weak answers on planning the transition, not just describing it, also cost marks.
Is this course still being updated?
PECB states that updates to this training course have been discontinued, and a new version might be available upon request by contacting [email protected]. Confirm with PECB or your training partner which version you will receive before enrolling, since the exam is tied to the course you attend.
How much continuing professional development credit does it carry?
An attestation of course completion worth 14 CPD credits is issued to participants who have attended the training course. The attestation is for attendance; the certificate and credential come after you pass the exam and meet the credential requirements, including signing the PECB Code of Ethics.