PECB Certified ISO/IEC 27002 Information Security Controls

Day 1: Introduction to ISO/IEC 27002

• Training course objectives and structure
• Standards and regulatory frameworks
• Fundamental concepts of information security, cybersecurity, and privacy
• Information security management system (ISMS) and ISO/IEC 27002
• Analyzing the organization’s existing security architecture
• Understanding information security risks

Day 2: Roles and Responsibilities, Assets, Policies, and People Controls

• Information assets and access controls
• People controls
• Selection and design of controls
• Information security policies, procedures, and roles and responsibilities

Day 3: Physical Controls and Protection of Information Systems and Networks

• Protection of information systems and network controls
• Physical controls
• Operational security controls

Day 4: Information Security Incident Management and Testing and Monitoring of Information Security Controls Based on ISO/IEC 27002

• Supplier relationships and ICT supply chain
• Information security incident management
• Information security testing
• Monitoring information security controls
• Continual improvement
• Closing of the training course

Day 5: Certification Exam

• Information Security Managers
• Cybersecurity Professionals
• IT Managers and Professionals
• GRC Professionals
• Risk Management Professionals
• Compliance Professionals
• Information Security Consultants
• ISO Consultants
• ISMS Team Members
• Security Managers
• Professionals responsible for information security, compliance, risk, or governance
• Professionals involved in implementing or managing an ISMS
• Consultants supporting ISO/IEC 27001 implementation
• Professionals seeking to strengthen their knowledge of information security controls

• Understand the fundamental concepts of information security, cybersecurity, and privacy.
• Explain the relationship between ISO/IEC 27001 and ISO/IEC 27002.
• Interpret ISO/IEC 27002 information security controls within an organizational context.
• Understand how information security risks influence control selection.
• Identify appropriate information security controls for addressing organizational risks.
• Understand the four control themes of ISO/IEC 27002.
• Support the implementation and management of information security controls.
• Understand organizational and people controls.
• Apply concepts related to physical and technological controls.
• Understand information security incident management.
• Support information security testing and monitoring activities.
• Evaluate the effectiveness of information security controls.
• Contribute to continual improvement of information security practices.
• Support an organization's ISMS implementation and information security objectives.

• A fundamental understanding of ISO/IEC 27002.
• Comprehensive knowledge of information security controls.

Certification: PECB Certified ISO/IEC 27002 Lead Manager
Exam: PECB Certified ISO/IEC 27002 Lead Manager Examination
Exam Duration: 3 Hours
Exam Level: Professional