- Duration: 2 days
Course Overview
The PECB Certified ISO/IEC 27400 Foundation training course introduces the fundamental principles, concepts, and security and privacy controls required to understand and support Internet of Things (IoT) security and privacy programmes in accordance with ISO/IEC 27400.
As IoT adoption continues to expand, organizations face growing risks related to device security, data privacy, operational continuity, and customer trust. This course provides participants with an understanding of IoT system stakeholders, life cycles, risk sources, and relevant security and privacy controls to help organizations strengthen their IoT security practices.
Upon successful completion of the examination, participants may apply for the Certificate Holder in ISO/IEC 27400 Foundation credential, subject to the applicable PECB certification requirements.
Learning Objectives
By the end of this training course, participants will be able to:
- Explain the fundamental concepts and principles of IoT security and privacy.
- Identify the key stakeholders involved in IoT systems.
- Describe the life cycle of an IoT system.
- Identify potential risk sources affecting IoT systems.
- Understand the security and privacy challenges associated with IoT technologies.
- Interpret and apply security and privacy controls in accordance with ISO/IEC 27400.
- Become familiar with best practices for establishing and supporting an IoT security and privacy programme.
Target Audience
This course is suitable for:
- Managers and consultants seeking to expand their knowledge of IoT security.
- Professionals interested in ISO/IEC 27400 guidelines for IoT security and privacy programmes.
- Individuals involved in or responsible for IoT security activities within their organizations.
- IT and information security professionals seeking foundational knowledge of IoT security.
- Individuals wishing to pursue a career in IoT security and privacy.
Course Content
Day 1: IoT Concepts, Principles, Life Cycle, and Stakeholders
- Introduction to the Internet of Things (IoT).
- Fundamental concepts and principles of IoT security and privacy.
- Overview of ISO/IEC 27400 and its purpose.
- IoT system stakeholders and their responsibilities.
- Understanding the IoT system life cycle.
- Security and privacy considerations throughout the IoT life cycle.
Day 2: IoT Risk Sources and Security and Privacy Controls
- Identifying risk sources affecting IoT systems.
- Understanding IoT security and privacy risks.
- Security and privacy controls for IoT systems.
- Interpreting and applying controls in accordance with ISO/IEC 27400.
- Best practices for supporting an IoT security and privacy programme.
- Course review and certification examination.
Examination and Certification
The PECB ISO/IEC 27400 Foundation examination complies with the requirements of the PECB Examination and Certification Programme (ECP).
The examination covers the following competency domains:
- Domain 1: Fundamental Concepts and Principles of IoT Security and Privacy.
- Domain 2: Risk Sources and Privacy and Security Controls for IoT Systems.
Examination duration: 1 hour.
Upon successfully passing the examination, participants may apply for the Certificate Holder in ISO/IEC 27400 Foundation credential.
Certification Requirements
Credential: Certificate Holder in ISO/IEC 27400 Foundation
- Examination: Successful completion of the PECB ISO/IEC 27400 Foundation examination.
- Professional experience: No professional experience required.
- IoT security project experience: None required.
- Other requirements: Signing the PECB Code of Ethics.
Certification is subject to the applicable PECB Certification Rules and Policies.
Course Benefits
- Certificate and examination fees are included in the training course fee.
- Participants receive more than 200 pages of training materials, including practical examples, exercises, and quizzes.
- Participants who attend the training course receive an attestation of completion equivalent to 14 Continuing Professional Development (CPD) credits.
- Candidates who complete the training with a PECB partner and fail their first examination attempt may retake the examination free of charge within 12 months of the course completion date, subject to PECB’s applicable terms and conditions. Otherwise, retake fees apply.
- Develop foundational knowledge of IoT security and privacy principles.
- Improve understanding of IoT risk sources and relevant security and privacy controls.
- Gain familiarity with ISO/IEC 27400 guidelines and their application to IoT environments.
Prerequisites
There are no prerequisites for participating in this training course.
Certification Body
PECB (Professional Evaluation and Certification Board)
PECB provides professional training, examination, and certification services across information security, risk management, governance, and related professional disciplines.