PECB Professional Evaluation and Certification Board.

What PECB actually is

PECB (the Professional Evaluation and Certification Board) is a personnel certification body. It does not certify your company against ISO 27001; that is the job of an accredited certification body that audits your management system. PECB certifies people. When a practitioner completes a course and passes the exam, PECB issues an individual credential that says this person has demonstrated competence against a defined scheme on a specific standard.

The catalogue is broad because the ISO portfolio is broad. PECB schemes span information security, risk management, business continuity, privacy and data protection, AI governance, and quality, among others. That breadth is the point: a practitioner can build a coherent credential path inside one issuing body rather than collecting badges from a dozen sources.

How the credentials are structured

PECB schemes are usually tied to a named standard and a named role. The most familiar pairings are Lead Implementer, for the person who builds and runs a management system, and Lead Auditor, for the person who audits one. Both exist for ISO 27001 and for other certifiable standards such as ISO 22301 for business continuity and ISO 42001 for AI management systems. Below those sit Foundation-level credentials that establish vocabulary and principles before a practitioner commits to the full implementer or auditor track.

The distinction between the two senior tracks matters more than the shared "Lead" label suggests. A Lead Implementer plans scope, writes policy, drives the Statement of Applicability and operates the controls. A Lead Auditor works the other side: planning audits, sampling evidence, interviewing, and reporting findings against a standard. They are complementary disciplines, and many practitioners hold both because running a management system well and auditing one require different muscles.

A credential is not the same thing as the underlying standard. ISO 27001 is the framework an organisation is certified against. The PECB credential is the proof that a named individual has been evaluated against a competence scheme built on that framework. Confusing the two is the most common mistake newcomers make.

Where PECB sits among certification bodies

Several organisations issue ISO-aligned personnel credentials, and an employer rarely cares about the issuing body in the abstract. What carries weight is the standard behind the credential and whether the certification scheme is accredited. PECB positions itself as an accredited body operating internationally, which is what gives the certificate portability across borders and recognition by employers who do not know the training provider.

For a practitioner choosing a path, the practical questions are: which standard do I need to work in, does this scheme cover the role I want, and is the credential recognised where I intend to practise. The issuing brand is the answer to recognition; the standard and the role answer the rest.