ISO/IEC 27002 MANAGER

Why should you attend?

ISO/IEC 27002 Manager training enables you to acquire the necessary knowledge to support an organization in implementing and managing Information Security Controls based on ISO/IEC 27002. During this training course, you will also gain a thorough understanding of best practices of Information Security Controls.

After understanding all the necessary concepts of Information Security Controls, you can sit for the exam and apply for a “Certified ISO/IEC 27002 Manager” credential. By holding an ISO/IEC 27002 Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to implement and manage Information Security controls in an organization.

Who should attend?

• Managers seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
• Individuals responsible for Information Security in an organization
• Information Security team members
• Expert advisors in information technology
• IT professionals
• Privacy officers
• Information Security officers

Learning objectives

• Acknowledge the correlation between ISO/IEC 27002 and ISO/IEC 27001
• Understand the implementation of Information Security Controls in accordance with ISO/IEC 27002
• Develop the expertise to support an organization to effectively implement, manage and maintain Information Security Controls
• Understand the formulation and implementation of Information Security requirements and objectives

Certification:

After successfully completing the exam, you can apply for the credentials. You will receive a certificate once you comply with all the requirements related to the selected credential.

Course Agenda:

1. Introduction to Information Security controls as recommended by ISO/IEC 27002
   • Course objective and structure
   • Standard and regulatory framework
   • Fundamental Principles of Information Security
   • Information Security Management System
   • Information security policies
   • Organization of information security
   • Human resource security
2. Information Security requirements and objectives based on ISO/IEC 27002
   • Asset Management
   • Access Control
   • Cryptography
   • Physical and Environmental Security
   • Operations Security
3. Monitoring, measurement, analysis, and evaluation of Information Security Controls and Certification Exam
   • Communications Security
   • System acquisition, development, and maintenance
   • Supplier Relationships
   • Incident Management
   • Information Security Aspects of Business Continuity Management
   • Compliance
   • Golden Rules and Conclusion
   • Applying for certification and closing of the training

Course Duration: 3 Days

Examination: 2 Hours

The “Certified ISO/IEC 27002 Manager” exam fully meets the requirements of the Examination and Certification Programme (ECP).

The exam covers the following competency domains:

• Domain 1 Fundamental principles and concepts of Information Security
• Domain 2 Information Security Controls based on ISO/IEC 27002