Course Outline
Day 1: Overview and Introduction to ISO/IEC 27002
Day 2: Defining roles and responsibilities, managing assets, establishing policies, and addressing people-centric controls
Day 3: Implementing physical security measures and safeguarding information systems and networks
Day 4: Handling information security incidents, along with testing and monitoring controls based on ISO/IEC 27002
Day 5: Certification Assessment
The “PECB Certified ISO/IEC 27002 Lead Manager” examination fully adheres to the PECB Examination and Certification Program (ECP) requirements. It evaluates candidates across the following competency domains:
Domain 1: Core principles and concepts of information security, cybersecurity, and privacy
Domain 2: The Information Security Management System (ISMS) and the initial stages of implementing ISO/IEC 27002 controls
Domain 3: Deploying and overseeing organizational and human resource controls per ISO/IEC 27002
Domain 4: Implementing and managing physical and technical controls in accordance with ISO/IEC 27002
Domain 5: Measuring performance, testing, and monitoring ISO/IEC 27002 information security controls
Upon successfully passing the exam, candidates may apply for one of the credentials listed below. A certificate is issued upon fulfillment of all requirements for the selected credential.
- PECB Certified ISO/IEC 27002 Provisional Manager
- Exam: PECB Certified ISO/IEC 27002 Lead Manager Exam, or an equivalent certification
- Professional experience: None required
- ISCMS project experience: None required
- Other requirements: Agreement to the PECB Code of Ethics
- PECB Certified ISO/IEC 27002 Manager
- Exam: PECB Certified ISO/IEC 27002 Lead Manager Exam, or an equivalent certification
- Professional experience: Two years of total experience, including one year in Information Security Management
- ISCMS project experience: A cumulative total of 200 hours dedicated to Information Security Management activities
- Other requirements: Agreement to the PECB Code of Ethics
- PECB Certified ISO/IEC 27002 Lead Manager
- Exam: PECB Certified ISO/IEC 27002 Lead Manager Exam, or an equivalent certification
- Professional experience: Five years of total experience, including two years in Information Security Management
- ISCMS project experience: A cumulative total of 300 hours dedicated to Information Security Management activities
- Other requirements: Agreement to the PECB Code of Ethics
- PECB Certified ISO/IEC 27002 Senior Lead Manager
- Exam: PECB Certified ISO/IEC 27002 Lead Manager Exam, or an equivalent certification
- Professional experience: Ten years of total experience, including seven years in Information Security Management
- ISCMS project experience: A cumulative total of 1,000 hours dedicated to Information Security Management activities
- Other requirements: Agreement to the PECB Code of Ethics
Information security activities must adhere to best practices in implementation and management, encompassing the following actions:
- Developing an ISMS implementation plan
- Oversizing information security implementation projects
- Executing information security processes
- Choosing appropriate information security processes
- Deploying information security controls
Requirements
Participants are expected to possess a foundational understanding of ISO/IEC 27002, along with a solid grasp of information security control mechanisms, to participate in this training.
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
