Certified ISO/IEC 27001 Foundation

Holders can explain the purpose of an information security management system and the structure of ISO/IEC 27001:2022, including clauses 4 to 10 and the Harmonized Structure. They can describe information security risk assessment and treatment, the Statement of Applicability, and the 93 Annex A controls grouped into organisational, people, physical and technological themes.

Who it is for: IT, security, compliance and risk staff, and anyone involved in or affected by an ISMS.

1. 01Information Security Concepts15% of the exam

   • Explain confidentiality, integrity and availability
   • Describe the relationship between assets, threats, vulnerabilities and risk
2. 02The ISO/IEC 27000 Family and Harmonized Structure15% of the exam

   • Describe the roles of ISO/IEC 27000, 27001, 27002 and 27005
   • Explain the Harmonized Structure common to ISO management system standards
3. 03ISO/IEC 27001:2022 Requirements25% of the exam

   • Describe the requirements of clauses 4 to 10 from context to improvement
   • Explain how the Plan–Do–Check–Act cycle applies to an ISMS
4. 04Risk Assessment and Treatment20% of the exam

   • Describe the information security risk assessment and treatment process
   • Explain the purpose and content of the Statement of Applicability
5. 05Annex A Controls15% of the exam

   • Describe the 93 Annex A controls across organisational, people, physical and technological themes
   • Identify examples of controls introduced in the 2022 edition such as threat intelligence
6. 06Certification and Continual Improvement10% of the exam

   • Describe the purpose of internal audit and management review
   • Explain the difference between organisational certification and personnel certification

Question types

Single choice 100%

Delivery

Online (remote proctored), Test centre

Retakes

Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

1. 1

   Register

   Create a free account and start the programme.

2. 2

   Practice

   Online practice test, 8 questions.

3. 3

   Training

   Optional

   Online course or classroom — or skip it.

4. 4

   Certification

   Independent exam and certification decision.

• Practice test8 questions · 20 min · 70% to pass · free with the programme
• ISO/IEC 27001 Foundation — online course14 h self-paced€349
• ISO/IEC 27001 Foundation — classroom courseLumen Cyber Institute (Demo), Dublin · 14 hDemo organisation€595
  • 27 Nov 2026 – 28 Nov 2026 · Lumen Cyber Institute (Demo), Dublin
  • 25 Dec 2026 – 26 Dec 2026 · Lumen Cyber Institute (Demo), Dublin

Training is optional and does not by itself confer certification. Find a training partner