ISO/IEC 27002 Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.

Why should you attend?

ISO/IEC 27002 Foundation training course enables participants to learn the basic concepts related to the implementation and management of information security controls based on the guidelines of ISO/IEC 27002. Through this training course, participants will be able to identify the information security controls of ISO/IEC 27002 that are categorised into four themes: organisational, people, physical, and technological. The training course also provides information on how ISO/IEC 27002 is related with other standards, such as ISO/IEC 27001 and ISO/IEC 27003.

The training course is followed by an exam. If you pass, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate. This certificate demonstrates that you have a general knowledge of ISO/IEC 27002 information security controls. 

Who can attend?

This training course is intended for:

• Managers and consultants seeking to know more about information security controls of ISO/IEC 27002
• Professionals engaged in or responsible for information security management 
• Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls
• Individuals interested to pursue a career in information security 

Prerequisites 

There are no prerequisites to participate in this training course.

Course agenda

DAY 1 | Introduction to ISO/IEC 27002 and organisational controls

DAY 2 | People, physical, and technological controls and certificate exam

Training material

The participant will receive training materials containing more than 200 pages of information and practical examples in electronic form via the KATE application. As part of the full-time course, the participant will also receive training materials in printed form.

Examination

The exam fully meets the requirements of the PECB Examination and Certificate Programme. It covers the following competency domains:

• DOMAIN 1 | Fundamental principles and concepts of information security, cybersecurity, and privacy
• DOMAIN 2 | Information security controls based on ISO/IEC 27002

The exam consists of 40 multiple-choice questions (a, b, c) and is closed book, i.e. no materials can be used. The exam takes 1 hour and can be taken online or in person. If you do not pass the exam, you can retake it free of charge within 12 months.

For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the PECB Examination Rules and Policies.

Price information

The price includes participation in the course, electronic training materials, exam and PECB certification fees. The price of the full-time course also includes a printed copy of the training material, lunch on teaching days and refreshments.

Certificate requirements

Upon the successful completion of the exam, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate. The certificate requirements for ISO/IEC 27002 Foundation are: