PECB ISO 27002 Information Security Controls Lead Manager

Day 1 Introduction to Information Security controls as recommended by ISO/IEC 27002

• Section 1: Course objective and structure
• Section 2: Standard and regulatory framework
• Section 3: Fundamental Principles of Information Security
• Section 4: Information Security Management System
• Section 5: Information security policies
• Section 6: Organization of information security

Day 2 Information Security requirements and objectives based on ISO/IEC 27002

• Section 7: Human resources security
• Section 8: Asset Management
• Section 9: Access Control

Day 3 Monitoring, measurement, analysis, and evaluation of Information Security controls

• Section 10: Cryptography
• Section 11: Physical and Environmental Security
• Section 12: Operations Security
• Section 13: Communications security

Day 4 Continual improvement of an organization’s Information Security Management System performance

• Section 14: System acquisition, development and maintenance
• Section 15: Supplier Relationships
• Section 16: Information security Incident Management
• Section 17: Information security aspects of business continuity management
• Section 18: Compliance
• Section 19: Golden Rules and Conclusion
• Section 20: Lead Manager Certification Scheme
• Section 21: Closing the Training

Day 5 Certification Exam

• Master the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
• Gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques required for the effective implementation and management of Information Security controls
• Comprehend the relationship between the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
• Understand the importance of information security for the strategy of the organization
• Master the implementation of information security management processes
• Master the formulation and implementation of security requirements and objectives

• Managers or consultants seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
• Project managers or consultants seeking to master the Information Security Management System implementation process
• Individuals responsible for the information security, compliance, risk, and governance, in an organization
• Members of information security teams
• Expert advisors in information technology
• Information Security officers
• Privacy officers
• IT professionals
• CTOs, CIOs and CISOs