By Jacob A. McLean, PECB Certified Trainer · September 17, 2026
The quick answer
New to information security? Start with Foundation. Already working in security, IT or risk and want to run an ISMS? Go straight to Lead Implementer.
What Foundation covers
ISO/IEC 27001 Foundation teaches the core concepts, structure and vocabulary of an ISMS. No prerequisites, lower cost, and the ideal base if the field is new to you or you support a project team.
What Lead Implementer covers
Lead Implementer goes far deeper: you learn to plan, build, run and improve an ISMS and prepare it for certification. It's aimed at people who need to deliver, not just understand.
Who should start where
Career-changers and newcomers: Foundation first. Managers, consultants and security practitioners: Lead Implementer. If your role calls for it and you have some background, you can skip straight to Lead level.
Can you skip Foundation?
Yes — Foundation isn't mandatory before Lead Implementer. It's a confidence-builder, not a gate. Unsure? Ask us and we'll recommend the right entry point.
Frequently asked questions
Is Foundation worth it if I'll do Lead anyway?
If you're already experienced, you can go straight to Lead. If you're new, Foundation makes Lead much easier.
Ready to take the next step?
Browse accredited courses or book a free consultation and we'll help you choose the right path.