ISO-IEC 27002 Lead Manager

ISO-IEC 27002 Lead Manager

Lead Manager training enables you to acquire the necessary expertise to support an organization in implementing and managing Information Security controls based on ISO/IEC 27002. During this training course, you will also gain a comprehensive knowledge of the best practices of Information Security Controls and improve Information Security within an organization.

After mastering all the necessary concepts of Information Security Controls, you can sit for the exam and apply for a “PECB Certified ISO/IEC 27002 Lead Manager” credential. By holding a PECB Lead Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in implementing and managing Information Security Controls based on ISO/IEC 27002.

Who should attend? 

•  Managers or consultants seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002.

•  Project managers or consultants seeking to master the Information Security Management System implementation process.

•  Individuals responsible for the Information Security, compliance, risk, and governance in an organization.

•  Information Security team members.

•  Expert advisors in information technology.

•  Information Security officers.

•  Information Security managers.

•  Privacy officers.

•  IT professionals.

•  CTOs, CIOs and CISOs.

Course agenda Duration: 5 days

Day 1 Introduction to Information Security controls as recommended by ISO/IEC 27002

•  Section 1: Course objective and structure.

•  Section 2: Standard and regulatory framework.

•  Section 3: Fundamental Principles of Information Security.

•  Section 4: Information Security Management System.

•  Section 5: Information security policies.

•  Section 6: Organization of information security.

Day 2 Information Security requirements and objectives based on ISO/IEC 27002

•  Section 7: Human resources security.

•  Section 8: Asset Management.

•  Section 9: Access Control.

Day 3 Monitoring, measurement, analysis, and evaluation of Information Security controls

•  Section 10: Cryptography.

•  Section 11: Physical and Environmental Security.

•  Section 12: Operations Security.

•  Section 13: Communications security.

Examination Duration: 3 hours

Domain 1 Fundamental principles and concepts of Information Security.

Domain 2 Information Security Controls based on ISO/IEC 27002.

Domain 3 Planning and evaluation of the needs and applicability of Information Security Controls.

Domain 4 Implementation and management of Information Security Controls.

Domain 5 Monitoring and measurement of Information Security Controls.

Domain 6 Continual improvement of Information Security Controls.