ISO/IEC 27002 Lead Manager
Course Overview
Effective information security controls are fundamental to protecting organizational information assets, mitigating cyber risks, and ensuring regulatory compliance. The ISO/IEC 27002 Lead Manager course provides participants with the competencies required to manage the selection, implementation, operation, monitoring, and continual improvement of information security controls in accordance with ISO/IEC 27002.
Through practical exercises, case studies, and real-world implementation scenarios, participants will learn how to align security controls with organizational objectives, integrate them into an ISMS, and improve the organization’s overall cybersecurity posture.
Target Audience
This course is intended for:
- Information Security Managers
- Information Security Officers
- ISMS Managers
- Cybersecurity Managers
- IT Managers and Infrastructure Managers
- Risk Management Professionals
- Compliance and Governance Professionals
- Security Consultants
- Internal and External Auditors
- Professionals responsible for implementing and managing information security controls
Learning Objectives
Upon successful completion of this course, participants will be able to:
- Understand the concepts, principles, and structure of ISO/IEC 27002.
- Interpret and apply the guidance provided by ISO/IEC 27002.
- Establish and manage information security controls within an ISMS.
- Select appropriate controls based on organizational risks and business objectives.
- Implement organizational, people, physical, and technological controls.
- Evaluate the effectiveness of implemented controls.
- Monitor, measure, and continually improve information security controls.
- Integrate ISO/IEC 27002 controls with ISO/IEC 27001 requirements.
- Prepare for the PECB ISO/IEC 27002 Lead Manager certification examination.
Duration
5 Days (Four days of instructor-led training followed by the certification examination on Day 5.)
Classroom
Participants attend instructor-led classroom sessions featuring expert-led lectures, practical implementation workshops, interactive discussions, case studies, and hands-on exercises to develop competencies in managing information security controls.
Certification
After successfully passing the examination and meeting the applicable certification requirements, participants may apply for the:
PECB Certified ISO/IEC 27002 Lead Manager
The certification validates the candidate’s competence in managing and continually improving information security controls based on ISO/IEC 27002.
Course Agenda
Day 1: Introduction to ISO/IEC 27002 and Information Security Controls
- Training course objectives and structure
- Overview of ISO/IEC 27002
- Relationship between ISO/IEC 27002 and ISO/IEC 27001
- Information security concepts and principles
- Organizational context
- Introduction to information security controls
Day 2: Implementing Organizational and People Controls
- Organizational controls
- People controls
- Risk-based control selection
- Policies and procedures
- Roles and responsibilities
- Security awareness and competence
Day 3: Implementing Physical and Technological Controls
- Physical security controls
- Technological controls
- Access control
- Cryptography
- Network security
- Secure operations
Day 4: Monitoring, Performance Evaluation, and Continual Improvement
- Monitoring control effectiveness
- Performance measurement
- Internal audits
- Management review
- Corrective actions
- Continual improvement
- Course review and examination preparation
Day 5: Certification Examination
- PECB ISO/IEC 27002 Lead Manager Certification Examination
Exam Duration
- Exam Duration: 3 hours
- Exam Format: Closed-book examination consisting of multiple-choice, scenario-based, and essay-type questions.
- Passing Score: Determined by PECB in accordance with its certification policies.
Successful candidates who meet PECB’s certification requirements may apply for the PECB Certified ISO/IEC 27002 Lead Manager credential.
