Information Security & Cybersecurity
Training courses in this portfolio focus on safeguarding information systems, identifying & mitigating cyber threats, and building robust security strategies that ensure data protection and integrity.
.
PECB's Information Security & Cybersecurity Training Portfolio
Take a glimpse at the training courses featured under Cybersecurity portfolio
ISO/IEC 27001 Lead Implementer
Develop the skills to support an organization in implementing and maintaining an ISMS based on ISO/IEC 2700
ISO/IEC 27001 Lead Auditor
Acquire the knowledge and skills to perform an ISMS audit by applying widely recognized audit principles, procedures, and techniques
ISO/IEC 27001 Transition
Understand the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022 and help an organization plan and implement changes to an existing ISMS in accordance with ISO/IEC 27001:2022
ISO/IEC 27002 Manager
Develop the skills necessary to implement, manage, and communicate information security controls based on ISO/IEC 27002
.
ISO/IEC 27002 Lead Manager
Acquire the knowledge and skills to perform an ISMS audit by applying widely recognized audit principles, procedures, and techniques
PECB Chief Information Security Officer (CISO)
Gain necessary knowledge, skills, and strategies to lead information security programs effectively
EBIOS Risk Manager
Understand risk assessment elements and concepts related to information security and develop the skills to successfully carry out such assessments by using the EBIOS method
.
ISO/IEC 27005 Risk Manager
Develop the skills to carry out risk management processes related to information security assets by following the guidelines of ISO/IEC 27005
ISO/IEC 27005 Lead Risk Manager
Acquire the expertise to support an organization in performing information security risk management processes by referring to the guidelines of ISO/IEC 27005
ISO/IEC 27035 Lead Incident Manager
Understand risk assessment elements and concepts related to information security and develop the skills to successfully carry out such assessments by using the EBIOS method
ISO/IEC 27005 Risk Manager
Gain the skills and knowledge to support an organization in implementing and managing an Information Security Incident Management Plan in accordance with the guidelines of ISO/IEC 27035
SO/IEC 27034 Lead Application Security Implementer
Acquire the skills to lead and implement an application security program in accordance with ISO/IEC 27034
ISO/IEC 27034 Lead Application Security Auditor
Acquire the knowledge and skills to perform an application security audit by applying widely recognized audit principles, procedures, and techniques
ISO/IEC 27400 Foundation
Gain knowledge on the basic principles of IoT security and privacy and ISO/IEC 27400
ISO/IEC 27400 Lead Manager
Master the management of processes and controls for security and privacy of IoT systems based on ISO/IEC 27400
Lead Cybersecurity Manager
Gain the skills and knowledge to support an organization in implementing, managing, and continually improving cybersecurity programs
Lead Cloud Security Manager
Obtain the necessary competence to plan, implement, manage, and maintain a cloud security program based on ISO/IEC 27017 and ISO/IEC 27018
Lead Pen Test Professional
Gain the knowledge and skills to lead a professional Penetration Test using a mix of practical techniques and management skills to analyze the test results
Lead SCADA Security Manager
Develop the skills to effectively implement a SCADA security program that protects systems from threats, vulnerabilities, and risks
ISO/IEC 27033 Lead Network Security Manager
Obtain the necessary competence to plan, implement, manage, and maintain network security based on ISO/IEC 27033 series of standards
Certified CMMC Professional (CCP) - Cybersecurity Maturity Model
Gain the necessary knowledge and skills to interpret, implement, and manage the CMMC practices based on the CMMC model and assess CMMC level 1 practices
NIS 2 Directive Lead Implementer
Acquire essential skills to help organizations effectively develop, implement, manage, and maintain a cybersecurity program compliant with the NIS 2 Directive requirements
Lead SOC 2 Analyst
Master the implementation and management of SOC 2 framework to ensure organizational data privacy and security compliance
Certified Canadian Program for Cyber Security Officer
Equips future cyber officers with a clear understanding of Canadian standards, assessment methods, and operational security tasks essential for supporting organizational protection strategies
Certified Lead Ethical Hacker (CLEH)
Gain the knowledge and skills to manage a penetration testing project and team, as well as plan and perform internal and external penetration testing, following best practices
Certified Cyber Threat Analyst (CCTA)
Develop the expertise to proactively hunt for cyber threats using threat intelligence and behavioral analysis techniques. Gain hands-on skills to assess
attack patterns, track threat actors, and enhance security operations with proactive defense strategies
Certified Digital Forensic Examiner (CDFE)
Gain hand-on experience through technical labs designed to teach you how to collect, analyze, and process digital evidence. Learn industry-standard forensic investigation techniques and legal compliance to support cybersecurity
Certified Artificial Intelligence Auditor (CAIA)
Prepares professionals to evaluate and audit AI systems by reviewing governance controls, data and model risks, and compliance with ethical and
regulatory requirements. Participants learn practical assurance and reporting techniques that help ensure AI solutions are transparent, reliable, and responsibly implemented.
Certified Cloud Security Analyst (CCSA)
Equips cloud security professionals to secure and monitor workloads across cloud and containerized environments using IAM, data protection controls,
and hardened configurations. Participants practice leveraging cloud-native logging, monitoring, and investigation tools to detect, analyze, and mitigate threats in real-world cloud infrastructures.
Certified Web Application Security Analyst (CWASA)
Equips security professionals to evaluate the security of web applications and APIs by analyzing architecture, mapping attack surfaces, and testing for common vulnerabilities such as injection, XSS, and broken access control Participants practice exploiting and validating findings, prioritizing risks, and recommending secure coding and configuration improvements to support secure development and protect critical web assets
Why Choose a Career in Cybersecurity Management?
Rapidly Evolving Field - Vital Role in Protecting Digital Assets - Diverse Career Paths
High-Paying Careers in Cybersecurity Management
Cybersecurity Consultant
Provides expert advice and guidance to organizations on how to protect their digital assets and infrastructure.
Annual Average Salary: U.S. $153,027
Incident Response Manager
Leads the response to cyber-attacks and breaches, managing the process of containing and mitigating the damage.
Annual Average Salary: U.S. $120,000
Cybersecurity Engineer
Develops and implements security measures to safeguard information against hackers, cyber-attacks, and other vulnerabilities.
Annual Average Salary: U.S. $158,002–$160,836
Network Security Engineer
Focuses on protecting an organization’s networking infrastructure from threats and attacks.
Annual Average Salary: U.S. $161,521–$162,531
Penetration Tester
Penetration Testers are responsible for testing and securing computer systems, networks, and applications to prevent breaches.
Annual Average Salary: U.S. $152,323
Note: The salary data presented here have been sourced from Glassdoor and may be subject to change over time due to various factors.

Professional Development Pathways
Training Course Levels and Durations
| Course Type | Level | Who Should Attend | Duration |
|---|---|---|---|
| Management System Training Courses | Foundation | Individuals who wish to learn the basics of implementing a management system and its processes | 2 DAYS |
| Lead Implementer | Individuals responsible for the implementation and management of a management system within their organization | 5 DAYS | |
| Lead Auditor | Individuals responsible for auditing and monitoring management systems | 5 DAYS | |
| Manager Training Courses | Foundation | Individuals who wish to study the fundamentals of the processes and procedures in the related field or standard | 2 DAYS |
| Manager / Officer | Managers in the relevant field who wish to develop the skills and knowledge to carry out and implement processes, approaches, and techniques for different programs, plans, strategies, etc. | 3 DAYS | |
| Lead Manager / Officer | Managers in the relevant field who wish to assess, manage, or maintain plans, assessments, frameworks, programs, or the like, and develop their management expertise | 5 DAYS | |
| Non-ISO Training Courses | Foundation | Individuals who wish to study the foundations of the associated field and its related processes | 2 DAYS |
| Manager / Officer | Managers in the relevant field who wish to gain knowledge on the fundamental principles and concepts of a management program | 3 DAYS | |
| Lead Manager / Officer / Professional and Analyst | Managers in the relevant field who wish to develop their skills and knowledge in the associated field and improve their management expertise | 5 DAYS | |
| Technical Cybersecurity Courses | Offensive Security | Professionals wishing to learn more about the tactics and techniques malicious hackers use and improve their capacity to protect their systems | 5 DAYS |
| Defensive Security | Individuals wishing to significantly improve their defensive capabilities and learn best practices for hardening systems and configuring security effectively | 5 DAYS | |
| Forensics | Professionals who wish to learn a wide range of skills and knowledge crucial for digital forensics | 5 DAYS |
Certification Criteria
Designation, Experience, and Project Requirements
| Exam Level | Designation | Professional Experience | Audit Experience | Project Experience |
|---|---|---|---|---|
| Foundation | Foundation | - | - | - |
| Provisional Manager | - | - | - | |
| Manager | 2 years (1 in the specialized field) | - | 200 hours | |
| Lead Manager | 5 years (2 in the specialized field) | - | 300 hours | |
| Senior Lead Manager | 10 years (7 in the specialized field) | - | 1000 hours | |
| Lead Auditor | Provisional Auditor | - | - | - |
| Auditor | 2 years (1 in the specialized field) | 200 hours | - | |
| Lead Auditor | 5 years (2 in the specialized field) | 300 hours | - | |
| Senior Lead Auditor | 10 years (7 in the specialized field) | 1000 hours | - | |
| Lead Implementer | Provisional Implementer | - | - | - |
| Implementer | 2 years (1 in the specialized field) | - | 200 hours | |
| Lead Implementer | 5 years (2 in the specialized field) | - | 300 hours | |
| Senior Lead Implementer | 10 years (7 in the specialized field) | - | 1000 hours | |
| Master | Master (Lead Auditor & Lead Implementer) | 20 years (10 in a leadership role in the specialized field) | 10,000 hours combination of auditing and project activities | |
PECB Training Course Delivery Formats
Diverse learning delivery methods catering to a wide range of learners, ensuring accessibility, flexibility, and quality.
Classroom
Engage in direct, interactive sessions with PECB Certified Trainers in a structured, face-to-face learning environment, ideal for hands-on knowledge application.
Virtual Classroom
Experience engaging, interactive training led by PECB Certified Trainers in a virtual classroom, accessible to all, including those with time constraints or travel limitations.
eLearning
Flexible, location-independent courses via pre-recorded videos. Offers quizzes and additional reading materials.
Self-Study
Self-paced learning with access to course materials. Best for those with prior knowledge and no need for guided teaching.