PECB Training in Buffalo

ISO 37001:2025 is an international standard for Anti-Bribery Management Systems (ABMS) that outlines requirements and provides guidance for preventing, detecting, and addressing bribery risks in organizations of any size or sector. This instructor-led, live training (available online or on-site) is designed for beginner to intermediate professionals who wish to understand and support the implementation or auditing of an anti-bribery management system based on ISO 37001:2025 for government and other sectors. By the end of this training, participants will be able to: - Understand the structure and intent of ISO 37001:2025. - Apply anti-bribery requirements in real-world organizational contexts. - Develop and monitor effective internal controls and reporting systems. - Support an organization’s efforts toward regulatory compliance and ethical integrity. **Format of the Course** - Interactive lecture and discussion. - Real-world case studies and examples. - Scenario-based exercises and group work. **Course Customization Options** - To request a customized training for this course, please contact us to arrange.

ISO 37301 is an international standard that outlines the requirements for establishing, developing, implementing, evaluating, maintaining, and enhancing an effective compliance management system (CMS). This instructor-led, live training (available online or on-site) is designed for professionals at beginner to intermediate levels who wish to understand, implement, or audit a compliance management system based on ISO 37301. By the end of this training, participants will be able to: - Understand the structure, purpose, and scope of ISO 37301. - Implement the key elements of a compliance management system (CMS). - Identify compliance risks and opportunities across the organization. - Integrate ISO 37301 CMS with existing governance, risk, or ISO systems for government. **Format of the Course** - Interactive lecture and discussion. - Hands-on exercises and real-world case studies. - Group activities and compliance scenario simulations. **Course Customization Options** - To request a customized training for this course, please contact us to arrange.

ISO 31000 is an international standard that provides principles and guidelines for effective risk management across all types of organizations, including those in the public sector. This instructor-led, live training (online or onsite) is designed for beginner to intermediate-level professionals who wish to develop a strong understanding of ISO 31000 and apply its risk management framework and processes to their organizations. By the end of this training, participants will be able to: - Understand the fundamental principles of ISO 31000 and risk management. - Apply the risk management framework to integrate risk across organizational functions. - Conduct risk identification, assessment, treatment, and monitoring. - Foster and maintain a risk-aware culture and communication structure within their organization. **Format of the Course** - Interactive lecture and discussion. - Real-world case studies and examples relevant to public sector operations. - Group exercises and scenario-based activities tailored for government applications. **Course Customization Options** To request a customized training for government, please contact us to arrange.

The PECB Certified Chief Information Security Officer (CISO) training course provides a comprehensive framework for strategic leadership in information security. It prepares participants to design, lead, and manage enterprise-wide information security programs that are aligned with organizational goals and global standards. This instructor-led, live training (online or onsite) is aimed at experienced information security professionals who wish to develop the strategic, managerial, and leadership competencies required to operate effectively as a CISO and achieve PECB certification for government. Upon completion of this training, participants will be able to: - Develop, lead, and oversee an enterprise-wide information security program. - Align information security strategy with organizational objectives. - Assess and manage information security risks effectively. - Establish governance and compliance frameworks based on international standards. - Lead cross-functional security initiatives and incident response activities. - Prepare for and pass the PECB Certified CISO exam. **Format of the Course** - Instructor-led live training (online or onsite). - Interactive lectures, discussions, and case studies. - Practice questions and exam preparation sessions. **Course Customization Options** - This course can be tailored to focus on specific frameworks or organizational sectors.

This instructor-led, live training in Buffalo (online or onsite) is designed for intermediate-level IT professionals and auditors who wish to acquire the skills and knowledge necessary to lead and conduct ISO/IEC 20000 audits effectively, ensuring that IT service management systems comply with the standard's requirements. By the end of this training, participants will be able to: - Understand the principles and requirements of ISO/IEC 20000. - Develop the skills to conduct an ISO/IEC 20000 audit in accordance with ISO 19011 and ISO/IEC 17021-1. - Plan, lead, and report on audits for IT service management systems (ITSMS). - Gain the confidence to achieve certification as an ISO/IEC 20000 Lead Auditor, enhancing their capabilities for government and private sector environments.

This instructor-led, live training in [location] (online or onsite) is designed for advanced-level IT professionals and service managers who wish to acquire the expertise necessary to lead the implementation and management of an IT Service Management System (SMS) in compliance with the ISO/IEC 20000 standard. By the end of this training, participants will be able to: - Understand the principles of IT Service Management (ITSM) based on ISO/IEC 20000. - Learn how to implement an IT Service Management System (SMS) in accordance with ISO/IEC 20000. - Acquire knowledge of best practices for implementing and managing ITSM processes. - Prepare for and conduct ISO/IEC 20000 certification audits. - Develop the skills needed to lead an ITSM implementation project within an organization, ensuring alignment with public sector workflows, governance, and accountability for government.

This instructor-led, live training in [location] (online or onsite) is designed for beginner-level IT professionals and service management practitioners who wish to understand the fundamentals of ISO/IEC 20000, learn how to implement a Service Management System (SMS), and prepare for the ISO/IEC 20000 Foundation certification exam. By the end of this training, participants will be able to: - Understand the core principles of ISO/IEC 20000. - Acquire knowledge of the requirements for a service management system (SMS). - Learn how to plan, implement, and maintain an SMS in alignment with ISO/IEC 20000 standards. - Prepare effectively for the ISO/IEC 20000 Foundation certification exam. This training is tailored to enhance the capabilities of professionals working in the public sector, ensuring they are well-equipped to apply these principles for government operations.

This instructor-led, live training in [location] (online or onsite) is aimed at beginner-level quality assurance professionals, regulatory compliance staff, medical device engineers, and any professionals involved in medical device manufacturing who wish to gain a foundational understanding of ISO 13485 to implement and maintain a compliant quality management system and ensure regulatory compliance for government and private sector organizations. By the end of this training, participants will be able to: - Understand the structure, purpose, and requirements of ISO 13485:2016. - Learn about the quality management principles specific to medical devices. - Gain insights into key processes and documentation required for compliance. - Understand the steps to implement and maintain an ISO 13485 quality management system (QMS).

The ISO/IEC 27002 Lead Manager training equips individuals with the essential expertise and knowledge required to support organizations in implementing and managing Information Security controls as outlined in ISO/IEC 27002.

Upon completion of this course, participants are eligible to sit for the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” credential. This certification demonstrates a mastery of the principles and techniques necessary for the implementation and management of Information Security Controls based on ISO/IEC 27002.

Who Should Attend?

• Managers or consultants aiming to implement an Information Security Management System (ISMS) in alignment with ISO/IEC 27001 and ISO/IEC 27002
• Project managers or consultants seeking to excel in the ISMS implementation process
• Individuals responsible for information security, compliance, risk management, and governance within an organization
• Members of information security teams
• Expert advisors in information technology
• Information Security officers
• Privacy officers
• IT professionals
• Chief Technology Officers (CTOs), Chief Information Officers (CIOs), and Chief Information Security Officers (CISOs)

Learning Objectives

• Acquire expertise in the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
• Gain a thorough understanding of the concepts, approaches, standards, methods, and techniques necessary for the effective implementation and management of Information Security controls
• Understand the interrelationships among the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
• Appreciate the significance of information security in organizational strategy
• Mastery of the processes involved in managing information security
• Proficiency in formulating and implementing security requirements and objectives

Educational Approach

• This training combines theoretical instruction with practical application
• Lectures enriched with real-world examples
• Practical exercises based on case studies
• Review sessions to aid in exam preparation
• A practice test that mirrors the certification exam format

General Information

• Certification fees are included in the exam price
• Participants will receive a comprehensive training manual containing over 500 pages of information and practical examples
• A certificate of participation, awarding 31 CPD (Continuing Professional Development) credits, will be provided to all attendees
• In the event of an exam failure, participants are entitled to retake the exam within 12 months at no additional cost

This training is designed to enhance the capabilities of professionals in the public sector, ensuring they have the necessary skills and knowledge to effectively manage information security for government agencies.

By participating in the PECB CISO training course, you will acquire the essential skills required to oversee and manage information security for government. This includes ensuring the implementation of robust security measures, identifying and mitigating information security risks, and developing effective security strategies tailored to the specific needs of your organization.

The PECB Certified DORA Lead Manager training course is designed to equip participants with the essential skills required to lead and manage the implementation of digital operational resilience strategies within financial institutions. This course ensures that organizations are in compliance with the European Union’s Digital Operational Resilience Act (DORA), thereby enhancing their ability to meet regulatory requirements and maintain robust cybersecurity practices for government and private sector entities.

This training course is designed to assist participants in understanding the foundational concepts and principles of a business continuity management system (BCMS) as outlined in ISO 22301. Participants will gain insights into the structure and requirements of the standard, including the BCMS policy, top management commitment, internal audits, management reviews, and the continual improvement process. This course is tailored to enhance preparedness and resilience for government agencies and organizations, ensuring they meet the highest standards of governance and accountability.

Why Should You Attend?

This training course is designed for government professionals and others to understand the fundamental concepts and principles of a business continuity management system (BCMS) based on ISO 22301. By participating in this training, attendees will gain insights into the structure and requirements of the standard, including the BCMS policy, top management's commitment, internal audit, management review, and the continual improvement process.

Following the completion of the training course, participants are eligible to sit for an exam. Successful candidates can apply for the “PECB Certificate Holder in ISO 22301 Foundation” credential. This certification demonstrates a comprehensive understanding of the fundamental concepts, principles, methodologies, requirements, framework, and management approach used in business continuity.

Who Should Attend?

• Individuals involved in business continuity for government
• Professionals seeking to gain knowledge about the main processes of business continuity management systems (BCMS)
• Those interested in pursuing a career in business continuity

Learning Objectives

• Acknowledge the correlation between ISO 22301 and other standards and regulatory frameworks for government
• Understand the components and operation of a BCMS based on ISO 22301 and its principal processes
• Grasp the concepts, approaches, methods, and techniques used for the implementation and management of a BCMS

Educational Approach

• Lecture sessions will include discussion questions and real-world examples.
• The exercises will feature multiple-choice quizzes to reinforce learning.
• Participants are encouraged to engage in interactive discussions and complete the quizzes collaboratively.
• The quizzes are designed to mirror the format of the certificate exam, preparing participants for success.

The ISO 22301 Introduction training course is designed to help participants understand the fundamental concepts of a Business Continuity Management System (BCMS). By attending this course, attendees will gain insight into the significance of BCMS and the benefits it can provide to businesses, society, and governments.

Who Should Attend?

• Individuals interested in Business Continuity Management
• Those seeking to acquire knowledge about the core processes of a Business Continuity Management System (BCMS)

Learning Objectives

• Comprehend the concepts, approaches, methods, and techniques necessary for implementing a Business Continuity Management System
• Understand the essential components of a Business Continuity Management System

This course is particularly relevant for government professionals looking to enhance their understanding of BCMS principles and practices for government operations.

In response to the increasing frequency of disruptions and the unpredictable nature of various disasters—whether natural, occupational, or related to information security—organizations are actively seeking ISO 22301 certification. As more entities strive for compliance with ISO 22301, there is a growing need for skilled auditors who can effectively assess and verify their adherence to these standards, particularly for government agencies and other public sector organizations.

Upon completing the training course, you will be eligible to take the examination. If you successfully pass the exam, you can apply for the “Certified ISO 22301 Lead Implementer” credential. This internationally recognized certificate demonstrates your professional capabilities and practical knowledge in implementing a Business Continuity Management System (BCMS) based on the requirements of ISO 22301 within an organization.

Who Should Attend?

• Project managers and consultants involved in business continuity management
• Expert advisors seeking to master the implementation of a BCMS
• Individuals responsible for maintaining compliance with BCMS requirements within an organization
• Members of the BCMS team

Learning Objectives

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for implementing and effectively managing a BCMS
• Learn how to interpret and implement the requirements of ISO 22301 in the specific context of an organization
• Understand the operation of the business continuity management system and its processes based on ISO 22301
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and continually improving a BCMS

Educational Approach

• This training course is grounded in theory, implementation best practices, and ISO 22301 requirements essential for the implementation of a BCMS.
• Lecture sessions are complemented with practical exercises based on a case study that includes role-playing and discussions.
• Participants are encouraged to communicate and engage in discussions and exercises.
• The exercises closely mirror the certification exam format.

General Information

• Certification fees are included in the exam price. After completing the course, you will be able to schedule your exam.
• Participants will receive training materials containing over 450 pages of explanatory information and practical examples.
• An Attendance Record worth 31 CPD (Continuing Professional Development) credits will be issued to participants who have attended the training course.
• If candidates do not pass the exam, they can retake it within 12 months following the initial exam at no additional cost.

This course is designed for government professionals and aligns with public sector workflows, governance, and accountability standards.

Disasters can have significant impacts on organizations, stemming from natural events, information security breaches, or other unforeseen incidents. These events are often unpredictable, underscoring the importance of preparedness in distinguishing your organization and shaping its future. For government agencies, proper planning is crucial to reduce risks, minimize consequences, and manage the negative effects of disasters while ensuring the continuous operation of essential services to meet public needs without interruption.

Why Should You Attend?

The ISO/IEC 27001 Foundation training provides a comprehensive understanding of the essential elements required to implement and manage an Information Security Management System (ISMS) as outlined in ISO/IEC 27001. This training course will cover various components of the ISMS, such as policy development, procedures, performance measurement, management commitment, internal audits, management reviews, and continuous improvement.

Upon completion of this course, you will be eligible to take the certification exam and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. This certification demonstrates your proficiency in the fundamental methodologies, requirements, framework, and management approaches necessary for government and public sector organizations.

Who Should Attend?

• Individuals involved in Information Security Management within their organizations
• Professionals seeking to gain knowledge about the core processes of Information Security Management Systems (ISMS)
• Those interested in advancing their careers in Information Security Management for government and other public sector entities

Educational Approach

• Lecture sessions are enriched with practical questions and real-world examples to enhance understanding.
• Practical exercises include case studies and group discussions to reinforce learning.
• Practice tests simulate the Certification Exam environment, providing a realistic assessment of your knowledge and readiness.

ISO/IEC 27001 Lead Auditor Training

The ISO/IEC 27001 Lead Auditor training equips participants with the essential expertise to conduct Information Security Management System (ISMS) audits by applying widely recognized audit principles, procedures, and techniques.

Why Should You Attend?

This training course will provide you with the knowledge and skills necessary to plan and execute internal and external audits in accordance with ISO 19011 and the ISO/IEC 17021-1 certification process.

Through practical exercises, you will gain mastery of audit techniques and become competent in managing an audit program, leading an audit team, communicating effectively with customers, and resolving conflicts.

After acquiring the necessary expertise to perform these audits, you can take the examination and apply for the “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Holding a PECB Lead Auditor Certificate will demonstrate your capabilities and competencies in auditing organizations based on best practices.

Who Should Attend?

• Auditors aiming to perform and lead ISMS certification audits
• Managers or consultants seeking to master the ISMS audit process
• Individuals responsible for maintaining compliance with ISMS requirements
• Technical experts preparing for an ISMS audit
• Expert advisors in Information Security Management

Learning Objectives

• Understand the operations of an ISMS based on ISO/IEC 27001
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand an auditor’s role in planning, leading, and following up on a management system audit according to ISO 19011
• Learn how to lead an audit and manage an audit team
• Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquire the competencies of an auditor to plan, lead, draft reports, and follow up on audits in compliance with ISO 19011

Educational Approach

• This training combines theoretical knowledge with best practices used in ISMS audits
• Lecture sessions are supplemented with examples based on case studies
• Practical exercises include role-playing and discussions based on a case study
• Practice tests mirror the Certification Exam to prepare participants for government and industry certification requirements

The ISO/IEC 27005 Lead Risk Manager training equips participants with the essential expertise to support organizations in the risk management process related to all assets critical for Information Security. This training utilizes the ISO/IEC 27005 standard as a reference framework, providing a comprehensive understanding of designing and developing an Information Security Risk Management program. The course also delves into best practices for risk assessment methods such as OCTAVE, EBIOS, MEHARI, and harmonized TRA. This training facilitates the implementation process of the ISMS framework outlined in the ISO/IEC 27001 standard.

Upon mastering the necessary concepts of Information Security Risk Management based on ISO/IEC 27005, participants can sit for the exam and apply for the “PECB Certified ISO/IEC 27005 Lead Risk Manager” credential. By obtaining a PECB Lead Risk Manager Certificate, individuals will demonstrate their practical knowledge and professional capabilities to support and lead teams in managing Information Security Risks, particularly relevant for government agencies and other public sector entities.

Who Should Attend?

• Information Security risk managers
• Information Security team members
• Individuals responsible for Information Security, compliance, and risk within an organization
• Individuals implementing ISO/IEC 27001 or seeking to comply with it, as well as those involved in a risk management program
• IT consultants
• IT professionals
• Information Security officers
• Privacy officers

Examination - Duration: 3 Hours

The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam fully aligns with the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:

• Domain 1: Fundamental principles and concepts of Information Security Risk Management
• Domain 2: Implementation of an Information Security Risk Management program
• Domain 3: Information security risk assessment
• Domain 4: Information security risk treatment
• Domain 5: Information security risk communication, monitoring, and improvement
• Domain 6: Information security risk assessment methodologies

General Information

• Certification fees are included in the exam price
• Participants will receive training material containing over 350 pages of information and practical examples
• A participation certificate with 21 CPD (Continuing Professional Development) credits will be issued
• In the event of exam failure, participants can retake the exam within 12 months at no additional cost

This training course provides comprehensive instruction on conducting risk assessments for information security by integrating the guidelines from ISO/IEC 27005:2022 and ISO/IEC 27001. In addition to theoretical knowledge, the course includes practical exercises, quizzes, and case studies, ensuring an engaging and interactive learning experience that aligns with best practices for government agencies.

Information security threats and attacks are evolving continuously. The most effective defense against these challenges is the proper implementation and management of information security controls and best practices. Information security is also a critical expectation and requirement set by customers, legislators, and other stakeholders. This training course is designed to prepare participants in implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices for managing an ISMS and a framework for its ongoing improvement. After completing the training course, participants can take the exam. Successful completion of the exam allows you to apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement an ISMS in accordance with the requirements of ISO/IEC 27001. ### Who Can Attend? - Project managers and consultants involved in or concerned with the implementation of an ISMS - Expert advisors seeking to master the implementation of an ISMS - Individuals responsible for ensuring compliance with information security requirements within an organization - Members of an ISMS implementation team ### General Information - Certification fees are included in the exam price. - Training materials containing over 450 pages of information and practical examples will be provided. - A participation certificate with 31 CPD (Continuing Professional Development) credits will be issued. - In the event of exam failure, you can retake the exam within 12 months at no additional cost. ### Educational Approach - The training course includes essay-type exercises, multiple-choice quizzes, examples, and best practices used in the implementation of an ISMS. - Participants are encouraged to communicate with each other and engage in discussions while completing quizzes and exercises. - Exercises are based on a case study. - The structure of the quizzes mirrors that of the certification exam. ### Learning Objectives This training course will help you: - Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS. - Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks. - Understand the operation of an information security management system and its processes based on ISO/IEC 27001. - Learn how to interpret and implement the requirements of ISO/IEC 27001 in the specific context of an organization. - Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS for government.

The ISO 28000 Lead Implementer training equips participants with the essential expertise to assist organizations in establishing, implementing, managing, and maintaining a Supply Chain Security Management System (SCSMS) based on ISO 28000. Throughout this training course, participants will gain a comprehensive understanding of best practices in Supply Chain Security Management Systems and enhance their ability to manage potential security risks and their impacts within an organization’s supply chain.

Upon mastering the necessary concepts of Supply Chain Security Management Systems, individuals can sit for the exam and apply for the “PECB Certified ISO 28000 Lead Implementer” credential. By obtaining a PECB Lead Implementer Certificate, professionals will demonstrate their practical knowledge and professional capabilities to implement ISO 28000 in an organization.

Who Should Attend?

• Managers or consultants involved in Supply Chain Security Management
• Expert advisors seeking to master the implementation of a Supply Chain Security Management System
• Individuals responsible for maintaining conformance with SCSMS requirements
• SCSMS team members

Learning Objectives

• Acknowledge the correlation between ISO 28000 and other standards and regulatory frameworks, particularly those relevant for government operations.
• Master the concepts, approaches, methods, and techniques used for the implementation and effective management of a SCSMS, ensuring alignment with public sector workflows and governance.
• Learn how to interpret ISO 28000 requirements in the specific context of an organization, including those for government agencies.
• Acquire the skills to support an organization in effectively planning, implementing, managing, monitoring, and maintaining a SCSMS, with a focus on accountability and transparency.
• Gain the expertise to advise organizations in implementing Supply Chain Security Management System best practices, ensuring compliance with regulatory requirements for government.

Educational Approach

• This training combines theoretical knowledge with practical applications used in the implementation of a SCSMS, tailored to meet the needs of public sector entities.
• Lecture sessions are enriched with real-world examples and case studies that highlight best practices for government operations.
• Practical exercises include role-playing and discussions based on a detailed case study, providing hands-on experience in managing supply chain security for government agencies.
• Practice tests simulate the Certification Exam to prepare participants thoroughly for the assessment.

General Information

• Certification fees are included in the exam price, ensuring transparency and cost-effectiveness for all attendees.
• A comprehensive training material set, containing over 450 pages of information and practical examples, will be provided to each participant.
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued upon completion of the course.
• In the event of exam failure, participants have the option to retake the exam within 12 months at no additional cost.

The ISO/IEC 42001 Foundation training course equips participants with the core principles necessary for establishing and managing an artificial intelligence management system (AIMS) in accordance with ISO/IEC 42001 standards. This course is designed to provide a comprehensive understanding, laying a solid foundation for further expertise in AIMS, particularly for government agencies seeking to enhance their technical capabilities and governance practices.

The ISO/IEC 42001 Lead Auditor training course equips participants with the essential skills to conduct audits of artificial intelligence management systems (AIMS). This training aligns with established audit principles, procedures, and techniques, ensuring that auditors are well-prepared to assess compliance and effectiveness in a manner consistent with best practices for government and other sectors.

ISO 9001 Foundation training equips participants with the essential elements required to implement and manage a Quality Management System (QMS) as outlined in ISO 9001. This course provides an understanding of various QMS components, including policy, procedures, performance measurements, management commitment, internal audits, management reviews, and continual improvement. Upon completing this training, participants are eligible to take the exam and apply for the “PECB Certified ISO 9001 Foundation” credential. A PECB Foundation Certificate demonstrates that you have grasped the fundamental methodologies, requirements, framework, and management approaches of QMS, which is particularly valuable for government agencies seeking to enhance their quality management practices. ### Who Should Attend? - Individuals involved in Quality Management - Professionals aiming to gain knowledge about the primary processes of Quality Management Systems (QMS) - Those interested in pursuing a career in Quality Management The “PECB Certified ISO 9001 Foundation” exam fully complies with the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains: - Domain 1: Fundamental principles and concepts of a Quality Management System (QMS) - Domain 2: Quality Management System (QMS) Upon successfully passing the exam, you can apply for the “PECB Certified ISO 9001 Foundation” credential. ### General Information - Certification fees are included in the exam price. - Training materials, consisting of over 200 pages of information and practical examples, will be provided. - A participation certificate with 14 CPD (Continuing Professional Development) credits will be issued. - In the event of an exam failure, you have the option to retake the exam within 12 months at no additional cost.

The ISO 9001 Lead Auditor training equips participants with the essential expertise to conduct Quality Management System (QMS) audits by applying widely recognized audit principles, procedures, and techniques. This course will provide you with the knowledge and skills necessary to plan and execute internal and external audits in compliance with ISO 19011 and the certification process according to ISO/IEC 17021-1. Through practical exercises, you will gain mastery of audit techniques and become competent in managing an audit program, leading an audit team, communicating effectively with customers, and resolving conflicts. Upon completing this training and acquiring the necessary expertise to perform these audits, you can take the exam and apply for a “PECB Certified ISO 9001 Lead Auditor” credential. Holding a PECB Lead Auditor Certificate will demonstrate your capabilities and competencies to audit organizations based on best practices, which is particularly valuable for government agencies striving for quality and efficiency in their operations. ### Who Should Attend? - Auditors seeking to perform and lead Quality Management System (QMS) certification audits - Managers or consultants aiming to master the QMS audit process - Individuals responsible for maintaining compliance with QMS requirements - Technical experts preparing for a QMS audit - Expert advisors in Quality Management ### General Information - Certification fees are included in the exam price. - Training materials containing over 450 pages of information and practical examples will be provided. - A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued. - In the event of exam failure, you can retake the exam within 12 months at no additional cost.

The ISO 9001 Lead Implementer training equips participants with the essential expertise to assist organizations in establishing, implementing, managing, and maintaining a Quality Management System (QMS) based on ISO 9001. Throughout this training course, attendees will gain a comprehensive understanding of best practices for QMS, which can enhance an organization’s customer satisfaction and overall performance and effectiveness.

Upon mastering the necessary concepts of Quality Management Systems, participants are eligible to sit for the exam and apply for the “PECB Certified ISO 9001 Lead Implementer” credential. Holding a PECB Lead Implementer Certificate demonstrates practical knowledge and professional capabilities to implement ISO 9001 in an organization, ensuring alignment with public sector workflows, governance, and accountability.

Who Should Attend?

• Managers or consultants involved in Quality Management
• Expert advisors seeking to master the implementation of a Quality Management System
• Individuals responsible for maintaining conformance with QMS requirements
• Members of QMS teams

General Information

• Certification fees are included in the exam price.
• Training materials, including over 450 pages of information and practical examples, will be provided.
• A participation certificate with 31 CPD (Continuing Professional Development) credits will be issued.
• In the event of exam failure, participants can retake the exam within 12 months at no additional cost.

The training course is designed to provide an in-depth understanding of the information security risk management process as outlined by ISO/IEC 27005 and its structural framework. This course offers a comprehensive overview of the guidelines specified in ISO/IEC 27005 for managing information security risks. It covers key areas such as context establishment, risk assessment, risk treatment, communication and consultation, recording and reporting, and monitoring and review. Upon completion of the training course, participants are eligible to enroll in the Foundation Exam. Successful passage of this exam allows individuals to apply for a “PECB Certificate Holder in ISO/IEC 27005 Foundation” certification. The Foundation Exam incurs an additional cost and consists of 40 questions to be completed within one hour, administered online. A PECB Foundation certificate demonstrates that the holder has a solid grasp of the fundamental concepts, principles, methodologies, processes, and management approaches used in information security risk management for government and other sectors.

Upon successfully completing the training course, you will be able to: - Explain the fundamental concepts and principles of an Asset Information Management System (AIMS) based on ISO/IEC 42001. - Interpret the ISO/IEC 42001 requirements for an AIMS from the perspective of an implementer. - Initiate and plan the implementation of an AIMS based on ISO/IEC 42001 by utilizing PECB’s IMS2 Methodology and other best practices, tailored for government use. - Support an organization in operating, maintaining, and continually improving an AIMS based on ISO/IEC 42001. - Prepare an organization to undergo a third-party certification audit.

The ISO/IEC 27002 Foundation training course offers essential insights into the core principles of information security, cybersecurity, and privacy, aligned with the standards set forth in ISO/IEC 27002. This training is designed to equip participants with a comprehensive understanding of these critical areas, ensuring they are well-prepared to implement robust security measures for government and other organizations.

The ISO/IEC 27002 Lead Manager training course equips participants with an in-depth knowledge and understanding of implementing and managing information security controls, aligned with the ISO/IEC 27002 standard. This training is designed to enhance the capabilities of professionals responsible for safeguarding information assets, ensuring compliance with regulatory requirements, and promoting best practices for government and other sectors.

The ISO/IEC 27002 Manager training course offers comprehensive guidance on implementing and managing information security controls in alignment with ISO/IEC 27002 standards. This training is designed to enhance the capabilities of professionals responsible for ensuring robust information security practices, particularly for government agencies that prioritize governance, accountability, and compliance.

The ISO/IEC 27035 Foundation training equips participants with the essential knowledge to implement an Incident Management Plan and manage Information Security Incidents effectively. Throughout this course, attendees will gain a comprehensive understanding of the processes involved in Information Security Incident Management. Upon successful completion of the course, individuals are eligible to sit for the examination and apply for the “PECB Certificate Holder in ISO/IEC 27035 Foundation” certification. This certification for government demonstrates that you have mastered the foundational methodologies, requirements, and management approaches necessary for effective incident response and security management.

The ISO/IEC 27001 Transition training course is designed to help participants gain a comprehensive understanding of the differences between ISO/IEC 27001:2013 and ISO/IEC 27001:2022. Additionally, this course will equip participants with knowledge of the new concepts introduced in ISO/IEC 27001:2022, ensuring they are well-prepared to implement these standards for government operations.

Why Should You Attend?

The Certified Lead Ethical Hacker training course equips you with the essential expertise to conduct information system penetration tests by applying recognized principles, procedures, and techniques. This course will help you identify potential threats on computer networks and manage a penetration testing project or team effectively. During the training, you will learn how to plan and perform both internal and external penetration tests in compliance with standards such as the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). Additionally, you will gain a comprehensive understanding of drafting reports and proposing countermeasures. Through practical exercises, you will master penetration testing techniques and develop skills in managing a pentest team, customer communication, and conflict resolution.

This training provides a technical overview of information security through ethical hacking, using common methods like information gathering and vulnerability detection within and outside business networks. The course is aligned with the NICE (National Initiative for Cybersecurity Education) Protect and Defend framework, ensuring that it meets industry standards and best practices.

After acquiring the necessary knowledge and skills in ethical hacking, you can take the exam to earn the "PECB Certified Lead Ethical Hacker" credential. Holding this certificate demonstrates your proficiency in performing and managing penetration tests according to established best practices, which is crucial for government and private sector roles alike.

Who Should Attend?

• Individuals interested in IT security and ethical hacking, whether to deepen their knowledge or explore a career change.
• Information security officers and professionals seeking to master ethical hacking and penetration testing techniques.
• Managers and consultants who want to learn how to oversee the penetration testing process effectively.
• Auditors aiming to conduct professional penetration tests.
• Personnel responsible for maintaining the security of information systems in an organization.
• Technical experts looking to prepare for and execute pentests.
• Cybersecurity professionals and members of information security teams who need advanced skills for their roles.

The PECB Lead Crisis Manager training course is designed to enhance participants' capabilities in supporting an organization's efforts to plan, establish, maintain, review, and continuously improve its strategic crisis management capacity in accordance with ISO 22361 guidelines and other best practices. This course also covers the essential concepts and principles of crisis management, as well as effective methods for establishing and implementing a robust crisis management framework for government and other sectors.

This course equips participants with the essential knowledge needed to approach, understand, manage, and successfully execute a digitalization and retention/archiving project for government. It covers critical areas such as security, search, and risk analysis techniques, along with the identification of legal, regulatory, contractual, and insurance issues. The curriculum includes methodological tools designed to effectively digitize any process and select appropriate solutions without delving into technical details. Additionally, the course provides insights into future trends in digital data and emerging technologies that are crucial for establishing robust data governance. Upon mastering all the concepts required for a digitalization project, participants will be eligible to take the exam and apply to become a PECB Certified Lead Digitalization and Electronic Archiving Manager. Achieving this certification demonstrates a practical understanding and professional capability to lead and support teams responsible for executing digitalization and electronic retention/archiving projects for government.

The PECB Certified Data Protection Officer training course equips you with the essential knowledge and skills required to effectively serve as a Data Protection Officer (DPO) in the implementation of a General Data Protection Regulation (GDPR) compliance program. ### Why Should You Attend? As data protection becomes increasingly vital, organizations must prioritize safeguarding this information. Non-compliance with data protection regulations not only infringes on individuals' fundamental rights and freedoms but also poses significant risks to an organization's credibility, reputation, and financial stability. Your expertise as a Data Protection Officer is crucial in mitigating these risks. The PECB Certified Data Protection Officer training course will provide you with the knowledge and skills necessary to serve as a DPO and assist organizations in ensuring adherence to GDPR requirements. Through practical exercises, you will gain mastery over the role of the DPO, enabling you to inform, advise, and monitor compliance with the GDPR, as well as collaborate effectively with supervisory authorities. Upon completing the training course, you can take the exam. Successfully passing the exam allows you to apply for the “PECB Certified Data Protection Officer” credential. This internationally recognized certification demonstrates your professional capabilities and practical knowledge in advising controllers and processors on meeting their obligations under GDPR compliance. ### Who Should Attend? - Managers or consultants aiming to prepare and support an organization in planning, implementing, and maintaining a GDPR-based compliance program - DPOs and individuals responsible for ensuring conformance with GDPR requirements - Members of information security, incident management, and business continuity teams - Technical and compliance experts preparing for a data protection officer role - Expert advisors involved in personal data security ### Learning Objectives - Understand the principles of the GDPR and interpret its requirements accurately - Grasp the content and interrelation between the General Data Protection Regulation and other regulatory frameworks and applicable standards, such as ISO/IEC 27701 and ISO/IEC 29134 - Develop the competence to perform the role and daily tasks of a data protection officer within an organization - Enhance your ability to inform, advise, and monitor compliance with the GDPR, while effectively cooperating with supervisory authorities This training is specifically designed to align with the stringent standards required for government and public sector workflows, governance, and accountability.