ISO 27002 Lead Manager

ISO 27002 Lead Manager is an international standard that provides guidelines for selecting and implementing information security controls and for implementing information security standards and practices. It is applicable to organizations of all industries or sizes. ISO/IEC 27002 can be used to develop information security management guidelines tailored to the specific context of an organization.

Originally published in 2005 and then updated in 2013, ISO/IEC 27002 was again revised and published in 2022. This new version provides a list of information security controls generally practiced in the information security industry, along with guidelines for their implementation. ISO/IEC 27002 provides four categories of information security controls: organizational (clause 5), people (clause 6), physical (clause 7), and technological (clause 8).

ISO 27002 Infographic

Why Should You Attend ISO 27002 Lead Manager training?

The ISO 27002 Lead Manager training course enables participants to develop the necessary knowledge and skills for supporting an organization in effectively determining, implementing, and managing information security controls. The training course provides information that will help participants interpret the ISO/IEC 27002 controls in the specific context of an organization.

The PECB ISO/IEC 27002 Lead Manager Certification demonstrates that you have acquired the necessary expertise for determining adequate information security controls needed to treat the risks identified by a risk assessment process.

The training course is followed by an exam. If you pass, you can apply for the “PECB Certified ISO 27002 Lead Manager” credential.

 Who Should Attend ISO 27002 Lead Manager training?

• This training course is intended for:
  • Managers or consultants seeking to enhance their knowledge regarding the implementation of information security controls in an ISMS based on ISO/IEC 27001
  • Individuals responsible for maintaining information security, compliance, risk, or governance in an organization
  • IT professionals or consultants seeking to enhance their knowledge in information security
  • Members of an ISMS implementation or information security team

Learning Objectives of ISO 27002 Lead Manager training

• Upon successfully completing the training course, participants will be able to:
  • Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
  • Acknowledge the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
  • Interpret the ISO/IEC 27002 information security controls in the specific context of an organization
  • Support an organization in effectively determining, implementing, and managing information security controls based on ISO/IEC 27002
  • Explain the approaches and techniques used for the implementation and effective management of information security controls

Educational Approach

• The training course integrates both theory and practice by guidance and practical examples for the implementation and management of information security controls.
• The training course contains essay-type exercises and multiple-choice quizzes, some of which are scenario-based.
• Participants are encouraged to communicate and discuss with each other while partaking in exercises and quizzes.
• The structure of quizzes is similar to that of the certification exam.

• • The “PECB Certified ISO/IEC 27002 Lead Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacyDomain 2: Information security management system (ISMS) and initiation of ISO/IEC 27002 information security controls implementationDomain 3: Implementation and management of organizational and people controls based on ISO/IEC 27002Domain 4: Implementation and management of physical and technological controls based on ISO/IEC 27002Domain 5: Performance measurement, testing, and monitoring of ISO/IEC 27002 information security controls
    For specific information about the exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.

Certification

After successfully completing the exam, you can apply for one of the credentials shown on the table below. You will receive a certificate once you fulfill all the requirements of the selected credential.