Cybersecurity training: every certification, by level and area
Cybersecurity covers very different profiles: those starting out, leading a programme, auditing, responding to an incident or testing systems. This page brings together our official PECB certifications and helps you choose the one that matches your experience and your goal.
First, your level
Three questions settle almost any decision.
Starting out, or need a common base?
A Foundation course gives you the vocabulary and the overall view. It is often the right choice if you come from another field or if your team needs a common language.
Will you lead, implement or audit?
The Manager, Lead Implementer and Lead Auditor levels are designed for those who take on that responsibility in an organisation.
Is your work technical?
The technical certifications focus on penetration testing, threat analysis, incident response or digital forensics.
To start: the Foundation courses
A solid base in one of the major areas of cybersecurity.
Cybersecurity Foundation
The overall view of cybersecurity: concepts, threats and controls.
Foundation · Material in English
ISO/IEC 27001:2022 Foundation
The requirements of the reference standard for information security.
Foundation · Material in English
ISO/IEC 27005 Foundation
The fundamentals of information security risk management.
Foundation · Material in English
NIS2 Directive Foundation
What the European NIS2 Directive requires and who it affects.
Foundation · Material in English
DORA Foundation
The European digital operational resilience regulation for the financial sector.
Foundation · Material in English
NIST Cybersecurity Foundation
The NIST cybersecurity framework and its logic.
Foundation · Material in English
ISO/IEC 27035 Foundation
The principles of security incident management.
Foundation · Material in English
Security management and governance
For those who lead security, implement a management system or audit it.
Lead Cybersecurity Manager
To manage a cybersecurity programme in the organisation.
Management · Material in English
Chief Information Security Officer (CISO)
To hold or prepare for the role of head of information security.
Management · Material in English
ISO/IEC 27001 Lead Implementer
To implement and lead an information security management system.
Implementation · Material in English
ISO/IEC 27001 Lead Auditor
To plan and lead audits of that management system.
Audit · Material in English
Risk management
To decide with sound judgement what to protect first, and why.
ISO/IEC 27005 Risk Manager
To manage information security risks with ISO/IEC 27005.
Management · Material in English
EBIOS Risk Manager
The risk analysis method of the French agency ANSSI.
Management · Material in English
Regulation and frameworks
To put European requirements and recognised frameworks into practice.
NIS2 Directive Lead Implementer
To put the NIS2 requirements into practice in your organisation.
Implementation · Material in English
NIST Cybersecurity Lead Implementer
To implement the NIST cybersecurity framework.
Implementation · Material in English
Offensive security and threat analysis
To test defences and anticipate attacks.
Certified Lead Ethical Hacker (CLEH)
Ethical hacking: finding vulnerabilities from the attacker's viewpoint.
Technical · Material in English
Certified Advanced Penetration Tester (CAPT)
Advanced penetration testing.
Technical · Material in English
Certified Cyber Threat Analyst (CCTA)
Detecting, hunting and analysing cyber threats.
Technical · Material in English
Incidents and digital forensics
To respond when something happens and learn from it.
ISO/IEC 27035 Lead Incident Manager
To lead security incident management.
Management · Material in English
Certified Incident Responder (CIR)
The technical response to an incident.
Technical · Material in English
Certified Digital Forensics Examiner (CDFE)
Digital forensics and the handling of evidence.
Technical · Material in English
Cloud, industry and SOC 2
For environments with their own requirements.
Lead Cloud Security Manager
To manage security in cloud environments.
Management · Material in English
Certified Cloud Security Analyst (CCSA)
The technical analysis of cloud security.
Technical · Material in English
Lead SCADA Security Manager
The security of industrial control systems.
Management · Material in English
ISA/IEC 62443 Lead Implementer
To implement the ISA/IEC 62443 industrial cybersecurity standard.
Implementation · Material in English
Two formats, at your own pace
Self-study
The official PECB material and the official exam, with a free second attempt if you need it. You set the pace and do not depend on scheduled sessions.
Self-study with coaching
All of the above, plus individual sessions with an expert selected by RRSG. You decide the session calendar.
Already clear about your professional goal?
This page shows our entire cybersecurity offer. The paths do something else: they put several certifications in order, one after another, towards a specific role.
Frequently asked questions
Where do I start with no cybersecurity experience?
Cybersecurity Foundation gives the broadest view. If you are interested in managing security in an organisation, ISO/IEC 27001 Foundation is also a good starting point.
What is the difference between Lead Implementer and Lead Auditor?
Lead Implementer prepares you to set up and lead a management system. Lead Auditor prepares you to assess it through audits. Choose according to the role you hold or wish to hold.
Do I have to take a Foundation course first?
It is not always necessary: it depends on your experience. If in doubt, we will gladly guide you before you decide.
What language is the material in?
Each card says so, and the course page gives the details.
Where can I see the price and the syllabus?
On each course page, which states the price of both formats, the syllabus and the exam conditions.
Not sure which one to choose?
Please tell us about your experience and what you would like to achieve, and we will be glad to guide you, with no obligation.