ISO/IEC 27002 - Foundation

It is applicable to organizations of all industries or sizes. ISO/IEC 27002 can be used to develop information security management guidelines tailored to the specific context of an organization.

ISO/IEC 27002 Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.

‍

‍

Who should attend?

‍

This training course is intended for:

‍

Managers and consultants seeking to know more about information security controls of ISO/IEC 27002

‍

Professionals engaged in or responsible for information security management

‍

Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls

‍

Individuals interested to pursue a career in information security

‍

‍

Learning objectives

‍

By successfully completing this training course, you will be able to:

‍

Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002

‍

Discuss the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks

‍

Interpret the ISO/IEC 27002 organizational, people, physical, and technological controls in the specific context of an organization

‍

‍

Educational approach

‍

This training course contains lecture sessions that are illustrated with practical questions and examples.

‍

The participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.

‍

The structure of quizzes is similar to that of the certificate exam.

‍

‍

Course Contents

‍

Day 1: Introduction to ISO/IEC 27002 and organizational controls

‍

Day 2: People, physical, and technological controls and certificate exam