Master the fundamentals of ISO/IEC 27001:2022 and information security management. Train your way — flexible Self-Study, a live Online Class, or in-person Classroom in Melbourne & Sydney — from $399 + GST, with the official PECB exam and a free resit included.
Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Live online classes run in Australian time zones; in-person classroom delivery in Melbourne and Sydney is available on request. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.
The PECB ISO 27001 Foundation training course costs $399 + GST through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months. The eLearning format is $449 + GST.
Online classes are arranged through the Aegentra Academy team for individual learners and groups.
Contact us for online classLearn · Practise · Implement
Aegentra combines official PECB training with free exam-preparation resources, practical ISO 27001 implementation tools and optional full exam practice through Aegentra Labs.
Learn
Included with courseThis is what the $399 + GST Self-Study price covers, or $449 + GST with PECB eLearning.
Choose your coursePractise
Free + optional paidTry before you buy
Want more practice?
$89 + GST for Academy learners
Regular price: $99 + GST · Save $10
Aegentra Labs is independently authored supplementary exam preparation. It is not official PECB course content and does not guarantee an examination result.
Implement
Free · No email requiredGo beyond passing the exam. Practical resources built around the work itself — the documents you will actually have to produce.
Explore free ISO 27001 resourcesNothing extra. The official PECB examination voucher is included in the course price, so there is no separate exam fee to pay later. The ISO 27001 Foundation course costs $399 + GST through Aegentra Academy as flexible Self-Study, or $449 + GST as guided eLearning. Both include two exam attempts — the initial sit plus one free retake within 12 months — 12 months of myPECB access, and the full course materials.
| What you are paying for | Aegentra Academy |
|---|---|
| Course — Self-Study | $399 + GST |
| Course — eLearning | $449 + GST |
| Course — live Online Class | Contact us for online class |
| Official PECB exam voucher | Included — no separate exam fee |
| Exam attempts | Two — initial sit plus one free retake within 12 months |
| myPECB platform access | 12 months |
| In-person Classroom (Melbourne & Sydney) | Available on request |
| Tax invoice with GST and ABN | Issued automatically at checkout |
All ISO 27001 training through Aegentra Academy is official PECB certification training, and the ISO 27001 exam cost is included in the course price rather than billed separately. Foundation is the entry point; the Lead tracks build on it.
The optional $89 + GST Aegentra Labs add-on offered on this page is supplementary exam preparation, not a fee for the official PECB examination. The PECB exam voucher is already included in the course price.
PECB publishes the full specification in its candidate handbook, which most providers summarise and none link to. The examination is 40 multiple-choice questions in one hour, closed book, passing at 70%. Each question has one correct answer and two distractors.
| Competency domain | Questions | Share of exam |
|---|---|---|
| Domain 1 — Fundamental principles and concepts of an ISMS | 20 | 50% |
| Domain 2 — Information security management system | 20 | 50% |
| Total | 40 | 100% |
Closed book is the detail that catches people out. Foundation is the only ISO 27001 credential in the PECB pathway sat without reference materials — both Lead Implementer and Lead Auditor are open book. You cannot look anything up, so the preparation is genuinely different: you are learning the clause structure and the four Annex A themes well enough to recall them, not well enough to find them. The full specification and sample questions are in the PECB ISO/IEC 27001 Foundation candidate handbook.
You sit it again at no cost. Because Aegentra Academy is an official PECB authorised training partner, the course fee covers the first attempt and one retake, and the retake is valid for 12 months from the date your exam coupon is issued. There is no additional fee, and no need to re-purchase the course.
Two conditions worth knowing before you book, because almost nobody publishes them. PECB requires a 15-day wait between a failed first attempt and the retake — so if you have a deadline, sit the exam with at least three weeks to spare. And after a failed sit you receive a breakdown of the domains you performed poorly in, which is the most useful preparation material you will get.
Beyond the included retake there is no limit on further attempts, but they are chargeable. Both conditions come from PECB's own retake policy, not from us.
It depends entirely on whether you need to learn the standard or prove that you know it. Free and low-cost courses can teach the content perfectly well. What they do not include is the part that costs money: the accredited examination and the credential.
A course that is not delivered by an authorised training partner cannot issue a PECB certificate, does not include an examination voucher, and produces no credential a procurement team or a recruiter can verify. If a certificate of completion is all you need, that is a reasonable choice and you should make it without guilt.
What $399 + GST buys is the examination itself, two attempts at it, 12 months of myPECB access, and — on passing — a PECB Certificate Holder credential that is independently verifiable. PECB is accredited by ANAB under ANSI/ASTM E2659-24. That is the whole difference, stated plainly.
Foundation teaches the clause structure and the four Annex A themes. Seeing those applied to a real organisation makes the closed-book recall considerably easier, so we publish the working documents in full and free — no email required.
The full set — including the internal audit plan, Clause 4–10 checklist and nonconformity report — is on the free ISO 27001 templates page. For the control catalogue on its own, see the complete list of all 93 Annex A controls.
The official PECB course and exam package starts at $399 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.
The exam voucher is included in your enrolment, and so is one free resit if you don't pass first time. Both the exam and the credential are issued directly by PECB.
On passing, you become a "PECB Certificate Holder in ISO/IEC 27001 Foundation". This is a certificate program rather than a certification, so no professional experience is required and there is no credential ladder. PECB’s certificate programs are accredited by the ANSI National Accreditation Board (ANAB) under ANSI/ASTM E2659.
Official training + independent exam preparation
Aegentra Academy provides the official PECB course, learning materials and examination pathway. Aegentra Labs is the separate practice workspace for a sourced exam guide, original PECB-style questions, timed exam mode, answer review and domain-level results for this exact qualification.
Labs practice is supplementary, independently authored and not official PECB course content or an examination guarantee.
/ Before you enrol
These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.
The published price is A$399 for Self-Study or A$449 for eLearning, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.
No ongoing PECB maintenance fee or CPD submission is required for a Foundation credential. PECB’s current maintenance policy lists Foundation, Provisional, and Transition credentials as maintenance-exempt.
Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.
Self-Study costs A$399 before tax and uses the official PECB slide-based materials. eLearning costs A$449 before tax — A$50 more — and adds recorded trainer-led lessons and interactive learning activities. Both routes lead to the same PECB exam and credential, and both include the same exam package. Choose eLearning if explanations and video guidance help you learn; choose Self-Study if you are comfortable working through standards-based material independently and want the lowest price.
Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — 1 hour; format — Multiple-choice; assessment — 40 multiple-choice questions worth 100 points in total, split evenly across 2 competency domains — fundamental principles and concepts of an ISMS (20 questions, 50 points) and the information security management system itself (20 questions, 50 points). Each question has one correct answer and two distractors. Confirmed against the PECB candidate handbook; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.
On passing, you become a "PECB Certificate Holder in ISO/IEC 27001 Foundation". This is a certificate program rather than a certification, so no professional experience is required and there is no credential ladder. PECB’s certificate programs are accredited by the ANSI National Accreditation Board (ANAB) under ANSI/ASTM E2659. A Foundation certificate does not require professional experience or project hours. After you pass, PECB processes the applicable certificate requirements.
No project or audit hours are required for the Foundation credential, so there is no project-hour evidence to submit.
Yes. You can hold both the ISO 27001 Lead Implementer and ISO 27001 Lead Auditor credentials. They are separate, complementary certifications: Lead Implementer demonstrates that you can build and operate the management system, while Lead Auditor demonstrates that you can audit and verify it. To earn both, complete each course, pass each exam, and apply for each credential. PECB assesses implementation-project experience for the Implementer tier and audit experience for the Auditor tier separately. If you pass an exam before meeting its full experience requirements, you can receive the applicable Provisional credential and upgrade later when those requirements are met; you do not need to retake that exam. Neither credential automatically grants the other.
5 modules, fully on-demand. Click any module to see the topics inside.
Named trainers are shown only where their role and public credentials can be verified. Delivery mode varies by course and selected cohort.
Cybersecurity & Information Security Expert
A Security, Technology, Risk, and Compliance professional with vast experience across private and public sector roles spanning financial services, government, manufacturing, healthcare, and retail. A certified PECB trainer delivering ISO/IEC 27001, ISO 22301, ISO/IEC 42001, CISSP, CISM, and CISA courses globally across the UK, USA, Canada, and Europe.
Senior Consultant & Auditor in Information and Cyber Security
PhD Andro Kull is the CEO of ConsultIT Ltd. and a board member, recognised for his expertise as a PECB Partner, Trainer, and MSECB Auditor. He serves as a Lead Implementer for the NIS 2 Directive and as a Chief Information Security Officer (CISO). With certifications as an ISMS Master and Lead Cybersecurity Manager, he also specialises in PIMS and ITSM as a Lead Implementer and Auditor, and is an expert in BCMS, ISO/IEC 27002 Lead Manager, ISO/IEC 27005 Lead Risk Manager, and ISO/IEC 27035 Lead Implementer.
PECB credentials stack — Foundation establishes the language, Lead Implementer builds the system, Lead Auditor verifies it. Pick the level that matches the work you will actually be doing.
Core ISO 27001 concepts, ISMS principles, and the Annex A control families.
8–12 hours · self-paced
Plan, deploy, and operate a full ISMS end to end.
30–40 hours · self-paced
Plan and conduct ISO 27001 audits — internal, supplier, and certification.
30–40 hours · self-paced
The PECB ISO 27001:2022 Foundation credential tells a hiring manager you can speak the language of information security management — Annex A controls, the Plan-Do-Check-Act loop, the ISMS scope statement, the Statement of Applicability. It is the lowest-friction way to put an internationally recognised certification on a CV without taking weeks off work, and it sets the baseline assumption for any GRC analyst, internal-audit, or security-coordinator role advertised in Australia.
Government contractors filling cleared and Protected-level roles list ISO 27001 awareness as expected. Financial services hiring under APRA CPS 234 want it for any role that touches the ISMS. SaaS companies selling into enterprise procurement add it to account-manager and solutions-engineer JDs to clear vendor security questionnaires faster. Defence-industry DISP membership reviews weight it positively at the entry assessment.
Foundation is not a substitute for Lead Implementer or Lead Auditor — it is the on-ramp. The vocabulary, the clause structure, and the control families covered at Foundation are assumed knowledge in every Aegentra Lead course. Many Foundation alumni progress to Lead Implementer within twelve months, often once they are assigned to a real ISMS project at work.
Foundation stacks cleanly with ISO 27701 (privacy), ISO 42001 (AI management), and SOC 2 — all of which inherit the ISMS structure. If your organisation runs multiple compliance regimes, a Foundation certificate is the cheapest way to make sure a junior team member can read every controls register without translation.
Defence Industry Security Program (DISP) membership, and any Commonwealth tender at PROTECTED, expects suppliers to demonstrate working information-security governance. A team where the GRC analysts hold PECB Foundation reduces the friction of explaining your ISMS to assessors. The Protective Security Policy Framework (PSPF) maps cleanly onto ISO 27001 — Foundation is what makes that mapping intuitive.
Banks, insurers, and superannuation funds operating under APRA CPS 234 must demonstrate that information-security accountability is understood across the second line of defence. Foundation-level credentialling is a common minimum for risk analysts, compliance officers, and project managers brought into CPS 234 evidence-gathering exercises.
Australian SaaS companies selling into enterprise typically face a procurement security questionnaire on day one. Having Foundation-credentialled staff on the account team reduces the volume of escalations to security engineering and shortens the average questionnaire turnaround. For MSPs running multi-tenant environments, Foundation is the minimum literacy for service-desk staff who will see customer ISMS evidence.
Operators captured by the Security of Critical Infrastructure (SOCI) Act and entities subject to the My Health Records Act both lean on ISO 27001 as the implementation template for their statutory obligations. Foundation gives the operational team the vocabulary to follow risk-register discussions and audit findings without needing a translator.
The exam is closed-book, so plan for recall rather than lookup. Work through these checkpoints before you sit it.
Free learning resources
Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.
Case study
Internal
audit
ISO 27001
Transitioning to ISO/IEC 27001: overcoming internal audit bottlenecks
Prepared by
Aegentra Information Security & Compliance Team
Aegentra does not only teach ISO 27001 — we implement and audit it. The engagement record below is a real Clause 9.2 internal audit for an Australian technology company: all of Clauses 4 to 10 and a risk-based sample of 47 Annex A controls, across 73 lines of enquiry. Scope, method, every finding and how each was closed out are published in full.
Free companion reading for anyone studying or implementing ISO/IEC 27001:2022:
Compare the family
The ISO 27001 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.
Compare ISO 27001 pathwaysSource and review status
Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.
Official PECB sources
Editorial accountability
Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.
Substantive review status
Official source links are checked separately. A course-specific substantive review date will be published when completed.
Yes. PECB certifications are internationally accredited and are accepted on Australian resumes, tender responses and procurement panels. Australia has no separate national licence for ISO 27001 Foundation — the recognition comes from the accreditation behind the credential, which is international.
PECB’s Foundation certificate programs are accredited by ANAB (ANSI National Accreditation Board) under ANSI/ASTM E2659 — the standard for certificate programs. Its professional certifications are separately accredited under ISO/IEC 17024, the international standard for bodies certifying persons, by IAS, UKAS, KAB and COFRAC.
Aegentra Academy is an official PECB authorised training partner in Australia, which is what allows this course to include the official PECB examination voucher rather than billing it separately. You can confirm that directly with PECB through the official PECB partner directory.
This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs ISO 27001 readiness and GRC engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.
Courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led cohorts and in-person delivery in Melbourne and Sydney are available on request. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.
Most candidates pass on the first attempt. The PECB ISO 27001 Foundation exam is one hour, multiple-choice, closed-book, covering two competency domains with a 70% pass mark. It tests recall and understanding of ISO/IEC 27001:2022 concepts rather than applied judgement, so 8–12 hours of study is normally enough. If you do not pass, one free resit is included within 12 months of purchase.
Through Aegentra Academy, the ISO 27001 Foundation course costs $399 + GST, and Lead Implementer and Lead Auditor cost $849 + GST each. Every price includes the official PECB exam voucher, 12 months of myPECB access, and one free resit within 12 months — there are no separate exam fees. Australian training providers commonly charge between $1,200 and $2,200 + GST for equivalent instructor-led ISO 27001 courses.
Five modules covering the structure of ISO/IEC 27001:2022, the Plan-Do-Check-Act cycle, the four Annex A control themes (Organisational, People, Physical, Technological — 93 controls in total), the day-to-day operation of an ISMS, and exam preparation. Total effort is 8-12 hours of self-paced study.
Yes. PECB is accredited by UKAS, IAS and COFRAC under ISO/IEC 17024 for personnel certification — the same accreditation framework that JAS-ANZ uses in Australia. The credential is recognised by Australian Commonwealth and state government tenders, APRA-regulated financial-services hiring, DISP-registered defence-industry employers, and every certification body operating in Australia.
No prior experience required. The Foundation pathway assumes no ISO knowledge and no security background — it is the entry point. If you have already implemented controls in a previous role you will move through the material faster, but the course is written for absolute beginners.
Foundation is awareness — you can describe the standard. Lead Implementer is execution — you can scope, build, and operate an ISMS from scratch, including writing the Statement of Applicability and preparing for a stage-2 audit. Lead Auditor is verification — you can plan and conduct internal, supplier, and certification audits to ISO 19011. Most people start at Foundation, then choose Implementer or Auditor based on the work they will actually do.
Typical effort is 8-12 hours of self-paced study spread over one to two weeks. You have 12 months of myPECB access so the pace is yours — some learners finish in a weekend, others spread it across a month while working full-time.
One-hour, multiple-choice, online-proctored. The exam covers two competency domains — fundamental concepts of an ISMS, and information security management based on ISO/IEC 27001. Pass mark is 70%. You receive your PECB digital certificate within a few business days of passing.
Every authorised PECB Foundation course leads to the same credential — the certificate is identical wherever you buy it. The differences are price, format, and who supports you. Aegentra delivers Foundation at $399 + GST with the official PECB exam, one free resit, and 12 months access included. Aegentra is also an active Australian ISO and cybersecurity consultancy, so Academy support is informed by current management-system practice.
ISO 27001 is a management-system standard — it certifies that your organisation has an end-to-end process for governing information security. The Essential Eight is a technical baseline published by the Australian Signals Directorate covering eight mitigations (application control, patch applications, etc.). The Essential Eight tells you what to do; ISO 27001 tells you how to run the system that decides what to do. Many Australian organisations implement both, with ISO 27001 as the umbrella and Essential Eight controls referenced inside the Annex A control set.
APRA CPS 234 is the prudential standard for information security for APRA-regulated entities (banks, insurers, super funds). Most CPS 234 obligations — board-level accountability, an information-asset inventory, classified information-security capability, incident response, internal audit — map directly onto ISO 27001 clauses and Annex A controls. Foundation gives you the language to see those mappings; Lead Implementer is what you need to actually build the ISMS that satisfies them.
Indirectly. Tenders and questionnaires usually ask whether your organisation holds the ISO 27001 certification (which is awarded to companies, not individuals). What Foundation does is make the staff completing those questionnaires meaningfully faster and more accurate — they understand the question being asked and the evidence that satisfies it. If the goal is the organisational ISO 27001 certificate, talk to us about the Govern service.
PECB awards 14 CPD credits on completion of the ISO 27001 Foundation course. These count toward maintenance of other PECB credentials and toward CPD requirements at most professional bodies (ISACA, (ISC)², AISA) on submission.
The Foundation credential does not expire and does not require renewal. The certificate is dated and refers to the ISO/IEC 27001:2022 edition; if the standard is significantly revised in future you may choose to take a refresher course, but there is no mandatory recertification.
Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. Groups of five or more receive a discount.
Immediately after payment. The Academy team confirms your seat with PECB and you receive login details by email — usually within one business day.
You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.
One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.
Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.