PECB ISO 27002 Information Security Controls Lead Manager Certification Course.

ISO/IEC 27002 Lead Manager

ISO/IEC 27002 is an international standard used as a reference for selecting and implementing information security controls listed in Annex A of ISO/IEC 27001.
It also provides guidance on the best practices of information security management that help organizations select, implement, and manage controls, policies, processes, procedures, and organizational structures’ roles and responsibilities.
ISO/IEC 27002 was originally published in 2005 as a revised version of ISO/IEC 17799, which outlined general guidance for information security. The standard was revised and renamed so that it becomes in alignment with ISO/IEC 27001 with the intention of having two complementary documents that can be used together.
ISO/IEC 27002 provides a list of security objectives and controls generally practiced in the information security industry. In particular, clauses 5 to 18 provide detailed implementation guidance to support the controls specified in Annex A of ISO/IEC 27001 (controls A.5 to A.18). It applies to all types of organizations (public and private sector, commercial and non-profit, etc.) that face information security risks.

Course Outline

Day 1 Introduction to Information Security controls as recommended by ISO/IEC 27002

Day 2 Information Security requirements and objectives based on ISO/IEC 27002

Day 3 Monitoring, measurement, analysis, and evaluation of Information Security controls

Day 4 Continual improvement of an organization’s Information Security Management System performance

Day 5 Certification Exam

What you will learn

Master the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
Gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques required for the effective implementation and management of Information Security controls
Comprehend the relationship between the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
Understand the importance of information security for the strategy of the organization
Master the implementation of information security management processes
Master the formulation and implementation of security requirements and objectives

Audience profile

Managers or consultants seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
Project managers or consultants seeking to master the Information Security Management System implementation process
Individuals responsible for the information security, compliance, risk, and governance, in an organization
Members of information security teams
Expert advisors in information technology
Information Security officers
Privacy officers
IT professionals
CTOs, CIOs and CISOs