- Duration: 3 days
Course Overview
The PECB Certified ISO/IEC 27002 Manager training course provides participants with the knowledge and practical skills required to select, implement, and manage information security controls based on ISO/IEC 27002.
Effective information security management requires organizations to identify potential risks, determine appropriate security controls, and implement measures to protect their information assets. This training course introduces the fundamental principles of information security, cybersecurity, and privacy, while explaining how ISO/IEC 27002 controls can be applied to address information security risks within an organizational context.
Participants will explore information security policies, procedures, asset protection, access control, people and physical security, operational security, supplier relationships, incident management, and the monitoring and continual improvement of information security controls. The course also explains the relationship between ISO/IEC 27002, ISO/IEC 27001, and other relevant standards and regulatory frameworks.
Upon successful completion of the training and examination, participants may apply for the PECB Certified ISO/IEC 27002 Manager credential, subject to fulfilling the applicable certification requirements.
Learning Objectives
By the end of this training course, participants will be able to:
- Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002.
- Understand the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks.
- Identify and select appropriate information security controls to address organizational risks.
- Support the implementation and management of information security controls within an Information Security Management System (ISMS).
- Understand the principles of information asset protection, access control, and operational security.
- Apply information security controls relating to people, physical security, technology, and supplier relationships.
- Explain the processes involved in information security incident management, security testing, and monitoring.
- Support the continual improvement of information security controls and management practices.
Target Audience
This training course is designed for:
- Managers involved in implementing an Information Security Management System (ISMS) based on ISO/IEC 27001.
- IT professionals and consultants seeking to enhance their knowledge of information security management.
- Members of ISMS implementation teams and information security departments.
- Professionals responsible for information security within their organizations.
- Individuals involved in selecting, implementing, monitoring, and maintaining information security controls.
Course Content
Day 1: Introduction to ISO/IEC 27002
- Training course objectives and structure
- Overview of relevant standards and regulatory frameworks
- Fundamental concepts of information security, cybersecurity, and privacy
- Information Security Management System (ISMS) and ISO/IEC 27002
- Selection and design of information security controls
- Information security policies and procedures
- Information security roles and responsibilities
Day 2: Information Assets, People Controls, Physical Controls, and Operational Security
- Information assets and access controls
- People controls and information security responsibilities
- Physical security controls
- Operational security controls
- Protection of information assets and systems
- Implementation of security measures within an organizational context
Day 3: Information Security Incident Management, Monitoring, and Certification Examination
- Protection of information systems and network security controls
- Supplier relationships and ICT supply chain security
- Information security incident management
- Information security testing
- Monitoring and evaluating information security controls
- Continual improvement of information security practices
- Course review and certification examination
Examination and Certification
The PECB Certified ISO/IEC 27002 Manager examination is conducted in accordance with the PECB Examination and Certification Program (ECP).
Examination Duration: 2 Hours
Competency Domains:
- Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy.
- Domain 2: Information security controls based on ISO/IEC 27002.
Upon successful completion of the examination, participants may apply for the appropriate PECB certification credential, subject to fulfilling the applicable certification requirements.
Available credentials include:
- PECB Certified ISO/IEC 27002 Provisional Manager
- PECB Certified ISO/IEC 27002 Manager
The PECB Certified ISO/IEC 27002 Manager credential requires two years of professional experience, including at least one year in information security management, a minimum of 200 hours of information security management activities, and signing the PECB Code of Ethics.
Course Benefits
- Comprehensive training materials containing more than 350 pages of information and practical examples.
- Training course completion attestation equivalent to 21 Continuing Professional Development (CPD) credits.
- Certification examination and certificate fees included in the training course price.
- One free examination retake within 12 months of the initial attempt for eligible candidates who fail the examination, subject to PECB’s applicable terms and conditions.
- Practical knowledge of selecting, implementing, and managing information security controls.
- Improved understanding of information security risk treatment and ISMS-related control implementation.
- Professional development opportunities in information security management and ISO/IEC 27002 implementation.
Prerequisites
A basic understanding of information security concepts is beneficial. Participants interested in ISMS implementation or information security management may particularly benefit from this course.