GRC Lab courses and certification prep
Everything Aron Lange's GRC Lab offers, from free fundamentals to lead implementer certification, in one place.
Courses
Pricing is shown on each course page on GRC Lab and can change, so we link out rather than quote a figure here.

ISO/IEC 27001 Lead Implementer
A complete, practitioner-led path to implementing an ISO/IEC 27001 ISMS, built around a 12-step project roadmap with templates and practice material.
View course
NIST CSF 2.0 Foundation
Learn the NIST Cybersecurity Framework 2.0, its core functions and how to apply them in practice.
View course
BPMN 2.0 for Enterprise Architects
Model business processes clearly with BPMN 2.0, a practical skill for GRC and enterprise architecture work.
View courseFree guides, toolkit and exams
Free guides
Free introductions and exam guides on their guides hub, from fundamentals to certification-specific walkthroughs. A good place to start before a paid course.
Browse GRC Lab's free guidesISO/IEC 27001 Project Toolkit
GRC Lab's toolkit now ships with their ISO/IEC 27001 Lead Implementer course: a 12-step roadmap, a 400-plus-task project plan, and ready-to-use templates (policies, risk register, Statement of Applicability and more).
View the toolkitCertification exam vouchers
GRC Lab is an authorized TRECCERT training provider and offers discounted exam vouchers, each including a free retake, across ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27005, ISO 22301 and ISO 37301.
See available vouchersCommunity and bootcamps
A community for GRC professionals to connect and grow together, alongside live bootcamps that pair masterclass workshops with a course and an exam voucher.
Learn more on GRC LabGRC Lab is an independent company. These pages are a genuine recommendation, with no paid or affiliate arrangement.
Frequently asked questions
Are exam fees included in the courses?
Certification exams are booked separately. GRC Lab is an authorized TRECCERT training provider and sells discounted exam vouchers that each include a free retake.
How much do GRC Lab courses cost?
Pricing is listed on each course page on GRC Lab and can change over time, so we link out to the source rather than quote a figure that might go stale.
What is the difference between the free guides and the paid courses?
The free fundamentals guides introduce core concepts at no cost. The paid courses go deeper, with structured roadmaps, templates and practice material aimed at implementation and certification.
Does ISMS Copilot earn a commission?
No. This is a good-faith recommendation of a company we rate, with no paid or affiliate arrangement.
Looking for more information security companies?
The ISMS Directory is our directory of ISO 27001, SOC 2 and compliance service providers: consultants, auditors, certification bodies and platforms. Browse it to find the right specialists for your needs.
Start learning with GRC Lab
Browse the full catalogue of courses, toolkits and resources.
ISMS Copilot