PECB ISO/IEC 27002 Lead Manager

The main requirements for participating in this training course are having a fundamental understanding of ISO/IEC 27002 and comprehensive knowledge of information security controls.

The ISO/IEC 27002 Lead Manager training course enables participants to acquire a comprehensive knowledge and understanding of the implementation and management of information security controls based on ISO/IEC 27002.

This training course is intended for:

• Managers or consultants seeking to enhance their knowledge regarding the implementation of information security controls in an ISMS based on ISO/IEC 27001
• Individuals responsible for maintaining information security, compliance, risk, or governance in an organization
• IT professionals or consultants seeking to enhance their knowledge in information security
• Members of an ISMS implementation or information security team
   

Learning Objectives
Upon successfully completing the training course, participants will be able to:

• Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
• Acknowledge the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Interpret the ISO/IEC 27002 information security controls in the specific context of an organization
• Support an organization in effectively determining, implementing, and managing information security controls based on ISO/IEC 27002 
• Explain the approaches and techniques used for the implementation and effective management of information security controls

Day 1: Introduction to ISO/IEC 27002

Day 2: Roles and responsibilities, assets, policies, and people controls

Day 3: Physical controls and protection of information systems and networks

Day 4: Information security incident management and testing and monitoring of information security controls based on ISO/IEC 27002

Day 5: Certification exam

The “PECB Certified ISO/IEC 27002 Lead Manager” exam meets all the requirements of the PECB Examination and Certification Program (ECP). It covers the following competency domains:

Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy

Domain 2: Information security management system (ISMS) and initiation of ISO/IEC 27002 information security controls implementation

Domain 3: Implementation and management of organizational and people controls based on ISO/IEC 27002

Domain 4: Implementation and management of physical and technological controls based on ISO/IEC 27002

Domain 5: Performance measurement, testing, and monitoring of ISO/IEC 27002 information security controls

 After successfully completing the exam, you can apply for one of the credentials shown on the table below. You will receive a certificate once you fulfill all the requirements of the selected credential.

The information security activities should follow best implementation and management practices and include the following:

1. Drafting an ISMS implementation plan
2. Managing an information security implementation project
3. Implementing information security processes
4. Selecting information security processes
5. Implementing information security controls