HomeCoursesInformation Security › ISO/IEC 27034 Foundation
Information Security Foundation EN

ISO/IEC 27034 Foundation

Understand the fundamentals of application security and the ISO/IEC 27034 framework: the Organization and Application Normative Frameworks (ONF/ANF), security controls across the software lifecycle and the core concepts of confidentiality, integrity and availability.

2 daysof training
Foundationentry level
ENlanguages
OfficialPECB exam incl.

Who is this course for?

  • Individuals involved in application security or IT governance
  • Professionals implementing or managing application security programs
  • IT professionals, developers and managers responsible for safeguarding applications
  • Anyone seeking foundational knowledge of ISO/IEC 27034

What you'll gain

  • The PECB Certified ISO/IEC 27034 Foundation credential
  • An understanding of application security concepts and ISO/IEC 27034
  • Knowledge of the ONF/ANF and controls across the software lifecycle
  • A solid base to progress towards the Lead Implementer level

Course programme

Day 1 · Introduction to application security and ISO/IEC 27034
  • Core concepts: confidentiality, integrity, availability, threats and vulnerabilities
  • Structure and components of ISO/IEC 27034 and related standards
Day 2 · Implementation and verification of controls
  • Organization and Application Normative Frameworks (ONF/ANF)
  • Validating requirements, assessing risks and verifying controls
  • KPIs, continuous improvement and the official Foundation exam

Exam, credits & certification

1 h
Duration of the official PECB exam
14 CPD
Continuing Professional Development credits awarded by the course
Included
Exam, marking and first issue of the certification, included in the price

After passing the exam, you can apply for the "PECB Certified ISO/IEC 27034 Foundation" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the level of the course according to PECB. Exam duration is indicative; ask me for the exact details when you enrol.

Your trainer

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

Over 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach standards theoretically: I apply them day to day with real clients: that's what I bring to my coaching and exam preparation.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP

Frequently asked questions

Do I need any prerequisites?
No formal prerequisites are required to take the course. Prior background in the field helps, but is not mandatory.
What language is the exam in?
The official PECB material and exam for this course are available in the languages shown on this page. Coaching is delivered in English to prepare you thoroughly. If you need a specific language, contact us and we will confirm it.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study gives you the official material, the exam and the certification so you can progress at your own pace. The coaching option adds one-to-one sessions with me, real-world case studies and guided exam preparation: I support you until you feel ready to certify.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive confident.
Do I need technical knowledge?
No. This is a foundation course, accessible to those just starting out. It gives you the conceptual baseline before you specialise.

Ready to get certified in ISO/IEC 27034 Foundation?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.