About Certraining

  • Home
  • About us

ISO/IEC 27002 foundation

  • Home
  • ISO/IEC 27002 foundation

ISO/IEC 27002 foundation

ISO/IEC 27002 Foundation training enables you to learn the basic elements to implement Information Security Controls as specified in ISO/IEC 27002. During this training course, you will be able to understand how ISO/IEC 27001 and ISO/IEC 27002 are related to ISO/IEC 27003 (Guidelines for the implementation of ISMS), ISO/IEC 27004 (Measurement of Information Security) and ISO/IEC 27005 (Risk Management in Information Security). The ISO/IEC 27000 series of standards provides best practice guidelines for information security management,risks, and controls within the context of an overall Information Security Management System. These best practices are not covered in ITIL. ISO/IEC 27002 is closely aligned with the ISO/IEC 27001 Standard and serves as a practical guideline for all members of staff as they initiate, implement and maintain an Information Security Programme.



What Should We Learn

  • Information Security Concepts

  • ISO/IEC 27002 Framework

  • Risk Management

  • Security Controls

  • Policies and Procedures

  • Asset Management

  • Access Control

  • Incident Management

  • Compliance and Auditing

  • Continuous Improvement



FAQs

Q: What are the ISO IEC 27002 standards?
Ans: ISO/IEC 27002 provides a reference set of information security, cyber security and privacy protection controls, including implementation guidance based on internationally recognised best practices.

Q: What is ISO IEC 27001 Foundation?
Ans: ISO/IEC 27001 (ISO 27001) is an international standard for Information Security management. It provides a model to establish, implement, maintain and continually improve a risk-managed Information Security Management System (ISMS).



Exam Information


  • Introduction to ISO/IEC 27002 - 10%

  • Information Security Management Principles - 20%

  • Risk Management Framework - 15%

  • Security Controls - 15%

  • Implementation of Security Controls - 15%

  • Monitoring and Review of Controls - 10%

  • Continuous Improvement - 5%

  • Compliance and Legal Issues - 5%

  • Leadership and Management of Information Security - 5%

Some of Our Clients