- Duration: 5 days
Course Overview
The PECB Certified ISO/IEC 27002 Lead Manager training course provides participants with the knowledge and practical skills required to determine, implement, manage, and continually improve information security controls based on ISO/IEC 27002.
In an increasingly complex cybersecurity environment, organizations must implement effective information security controls to protect information assets, manage risks, and maintain compliance with applicable requirements. This training course equips participants with the methodologies and best practices needed to identify appropriate controls, evaluate existing security measures, and align information security practices with organizational objectives.
Participants will explore the relationship between ISO/IEC 27002, ISO/IEC 27001, and other relevant standards and regulatory frameworks. The course covers organizational, people, physical, and technological controls, as well as supplier security, incident management, security testing, monitoring, and continual improvement.
Upon successful completion of the training and examination, participants may apply for the PECB Certified ISO/IEC 27002 Lead Manager credential, subject to fulfilling the applicable certification requirements.
Learning Objectives
By the end of this training course, participants will be able to:
- Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002.
- Understand the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks.
- Analyze an organization’s existing security architecture and identify information security risks.
- Interpret ISO/IEC 27002 information security controls within a specific organizational context.
- Determine and implement appropriate information security controls to address identified risks.
- Establish information security policies, procedures, roles, and responsibilities.
- Implement and manage organizational, people, physical, and technological security controls.
- Manage supplier relationships, ICT supply chain security, and information security incidents.
- Apply techniques for measuring, testing, monitoring, and continually improving information security controls.
Target Audience
This training course is designed for:
- Managers and consultants seeking to enhance their knowledge of implementing information security controls within an ISMS based on ISO/IEC 27001.
- Professionals responsible for information security, compliance, risk management, or governance.
- IT professionals and consultants seeking to strengthen their expertise in information security management.
- Members of ISMS implementation teams and information security departments.
- Professionals involved in selecting, implementing, monitoring, and improving organizational information security controls.
Course Content
Day 1: Introduction to ISO/IEC 27002
- Training course objectives and structure
- Overview of relevant standards and regulatory frameworks
- Fundamental concepts of information security, cybersecurity, and privacy
- Information Security Management System (ISMS) and ISO/IEC 27002
- Analysis of the organization’s existing security architecture
- Understanding information security risks
- Introduction to the selection and implementation of information security controls
Day 2: Roles and Responsibilities, Assets, Policies, and People Controls
- Selection and design of information security controls
- Information security policies and procedures
- Definition of information security roles and responsibilities
- Identification and protection of information assets
- Access control principles and practices
- People controls and security responsibilities
- Information security awareness and training
- Applying controls within an organizational context
Day 3: Physical Controls and Protection of Information Systems and Networks
- Physical security controls
- Protection of facilities, equipment, and information assets
- Operational security controls
- Protection of information systems
- Network security controls
- Implementation and management of technological safeguards
- Security measures for maintaining the confidentiality, integrity, and availability of information
Day 4: Information Security Incident Management, Testing, and Monitoring
- Supplier relationships and ICT supply chain security
- Information security incident management
- Incident response and handling procedures
- Information security testing
- Monitoring the effectiveness of information security controls
- Performance measurement and evaluation
- Continual improvement of information security controls
- Course review and closing activities
Day 5: Certification Examination
- PECB Certified ISO/IEC 27002 Lead Manager examination
Examination and Certification
The PECB Certified ISO/IEC 27002 Lead Manager examination is conducted in accordance with the PECB Examination and Certification Program (ECP).
Examination Duration: 3 Hours
Competency Domains:
- Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy.
- Domain 2: Information Security Management System (ISMS) and initiation of ISO/IEC 27002 information security controls implementation.
- Domain 3: Implementation and management of organizational and people controls based on ISO/IEC 27002.
- Domain 4: Implementation and management of physical and technological controls based on ISO/IEC 27002.
- Domain 5: Performance measurement, testing, and monitoring of ISO/IEC 27002 information security controls.
Upon successful completion of the examination, participants may apply for the appropriate PECB certification credential, subject to meeting the applicable professional experience, information security management experience, and other certification requirements.
Available credentials include:
- PECB Certified ISO/IEC 27002 Provisional Manager
- PECB Certified ISO/IEC 27002 Manager
- PECB Certified ISO/IEC 27002 Lead Manager
- PECB Certified ISO/IEC 27002 Senior Lead Manager
Course Benefits
- Comprehensive training materials containing more than 450 pages of information, practical examples, exercises, and quizzes.
- Training course completion attestation equivalent to 31 Continuing Professional Development (CPD) credits.
- Certification examination and certificate fees included in the training course price.
- One free examination retake within 12 months for eligible candidates who fail their initial attempt, subject to PECB’s applicable terms and conditions.
- Practical knowledge of selecting, implementing, and managing information security controls.
- Enhanced capabilities in information security risk management, incident response, security monitoring, and continual improvement.
- Professional development opportunities in information security management and ISMS implementation.
Prerequisites
A basic understanding of information security concepts and management systems is beneficial. However, participants should refer to the official PECB course requirements for any specific prerequisites applicable to the current certification scheme.