Course Outline
Day 1: Overview of ISO/IEC 27002 Information Security Controls
Day 2: Governance structures, asset management, policy frameworks, and personnel-based controls
Day 3: Physical security measures and safeguards for information systems and network infrastructure
Day 4: Management of information security incidents, along with the testing and monitoring of controls under ISO/IEC 27002
Day 5: Certification Examination
The PECB Certified ISO/IEC 27002 Lead Manager examination adheres to all standards established by the PECB Examination and Certification Program (ECP). It assesses competence across the following domains:
Domain 1: Core principles and concepts regarding information security, cybersecurity, and privacy
Domain 2: Information Security Management Systems (ISMS) and the initiation of control implementation aligned with ISO/IEC 27002
Domain 3: Deployment and administration of organizational and people-centric controls pursuant to ISO/IEC 27002
Domain 4: Deployment and administration of physical and technological controls pursuant to ISO/IEC 27002
Domain 5: Performance evaluation, testing, and continuous monitoring of ISO/IEC 27002 controls
Upon successfully passing the examination, candidates may apply for the credentials listed in the table below. Official certification is issued only upon fulfillment of all prerequisites for the selected credential.
| Credential | Examination | Professional Experience | ISMS Project Experience | Additional Requirements |
| PECB Certified ISO/IEC 27002 Provisional Manager | PECB Certified ISO/IEC 27002 Lead Manager Examination, or recognized equivalent | None | None | Execution of the PECB Code of Ethics |
| PECB Certified ISO/IEC 27002 Manager | PECB Certified ISO/IEC 27002 Lead Manager Examination, or recognized equivalent | Two years total: including one year of professional experience in Information Security Management | Engagement in Information Security Management activities totaling 200 hours | Execution of the PECB Code of Ethics |
| PECB Certified ISO/IEC 27002 Lead Manager | PECB Certified ISO/IEC 27002 Lead Manager Examination, or recognized equivalent | Five years total: including two years of professional experience in Information Security Management | Engagement in Information Security Management activities totaling 300 hours | Execution of the PECB Code of Ethics |
| PECB Certified ISO/IEC 27002 Senior Lead Manager | PECB Certified ISO/IEC 27002 Lead Manager Examination, or recognized equivalent | Ten years total: including seven years of professional experience in Information Security Management | Engagement in Information Security Management activities totaling 1,000 hours | Execution of the PECB Code of Ethics |
Professional activities in information security should adhere to best practices for implementation and management, encompassing the following:
- Formulating an ISMS implementation strategy
- Overseeing information security implementation projects
- Deploying information security processes
- Evaluating and selecting appropriate information security processes
- Implementing specific information security controls
Requirements
Primary prerequisites for enrollment include a foundational understanding of ISO/IEC 27002 and a robust grasp of information security control mechanisms.
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
Speed of response and communication