- Duration: 2 days
Course Overview
The PECB ISO/IEC 27002 Foundation training course provides participants with the fundamental knowledge and understanding required to identify, interpret, and apply information security controls based on ISO/IEC 27002.
The course introduces the key concepts of information security, cybersecurity, and privacy, with a focus on the selection and implementation of appropriate information security controls to address organizational security requirements. Participants will explore the four control themes defined in ISO/IEC 27002: organizational, people, physical, and technological controls.
The training also explains the relationship between ISO/IEC 27002 and other relevant standards, including ISO/IEC 27001 and ISO/IEC 27003, helping participants understand how information security controls support the establishment, implementation, and continual improvement of an Information Security Management System (ISMS).
Upon successful completion of the training and examination, participants may apply for the PECB Certificate Holder in ISO/IEC 27002 Foundation credential, demonstrating their understanding of information security controls and their application within an organizational context.
Learning Objectives
By the end of this training course, participants will be able to:
- Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002.
- Describe the purpose, structure, and scope of ISO/IEC 27002.
- Explain the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks.
- Identify and interpret organizational, people, physical, and technological information security controls.
- Understand how information security controls contribute to the protection of organizational information assets.
- Recognize the role of information security controls in supporting the implementation and management of an ISMS.
Target Audience
This training course is designed for:
- Managers and consultants seeking to understand information security controls based on ISO/IEC 27002.
- Professionals involved in or responsible for information security management.
- Individuals seeking to develop their knowledge of ISMS processes and information security controls.
- IT professionals interested in strengthening their understanding of information security practices.
- Individuals pursuing a career in information security, cybersecurity, or information security management systems.
Course Content
Day 1: Introduction to ISO/IEC 27002 and Organizational Controls
- Introduction to information security, cybersecurity, and privacy
- Overview of ISO/IEC 27002 and its purpose
- Structure and key concepts of ISO/IEC 27002
- Relationship between ISO/IEC 27002, ISO/IEC 27001, and other relevant standards
- Overview of information security controls
- Organizational controls and their application
- Information security policies and governance
- Roles, responsibilities, and organizational security practices
Day 2: People, Physical, and Technological Controls
- People controls and information security responsibilities
- Security awareness, education, and training
- Physical security controls and protection of facilities
- Protection of information assets and equipment
- Technological controls and information security measures
- Access control and identity management
- Information protection and technology-related security practices
- Applying information security controls within an organizational context
- Course review and certification examination
Examination and Certification
The PECB ISO/IEC 27002 Foundation examination is conducted in accordance with the PECB Examination and Certification Program (ECP).
Examination Duration: 1 Hour
Competency Domains:
- Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy.
- Domain 2: Information security controls based on ISO/IEC 27002.
Upon successful completion of the examination, participants may apply for the PECB Certificate Holder in ISO/IEC 27002 Foundation credential, subject to fulfilling the applicable certification requirements, including signing the PECB Code of Ethics.
Course Benefits
- Comprehensive training materials containing more than 200 pages of information and practical examples.
- Training course completion attestation equivalent to 14 Continuing Professional Development (CPD) credits.
- Certification examination and certificate fees included in the training course price.
- One free examination retake within 12 months for eligible candidates who fail their initial attempt, subject to PECB’s applicable terms and conditions.
- Improved understanding of information security controls and their practical application.
- Foundational knowledge to support further professional development in information security and ISMS implementation.
Prerequisites
There are no formal prerequisites for participating in this training course.