ISO/IEC 27002 Foundation (PC3874)

This foundational module introduces participants to the essential concepts of ISO/IEC 27002 and organizational security controls. Participants will explore the structure and organization of the standard, the relationship with ISO/IEC 27001, and the approach by control categories. The module covers organizational security controls including information security policies, information security organization, human resource security, and asset management. Special attention is given to security roles and responsibilities, personnel awareness, and establishing a security governance framework. Participants will develop an in-depth understanding of organizational controls, their practical implementation, and integration into existing business processes. The module also addresses the selection criteria for appropriate controls, risk-based control implementation, and the importance of organizational culture in security effectiveness.

This practical module covers security controls specific to people, physical environment, and technologies. Participants will explore physical and environmental security controls, operations and communications management, access control, cryptography, and information systems security. The module includes security in development and support, supplier relationships, information security incident management, and business continuity aspects. Participants will learn practical control application, appropriate selection criteria, and effectiveness assessment of measures. The module covers implementation challenges, control testing methods, and integration with organizational processes. The day concludes with intensive certification exam preparation featuring practical exercises, case studies, and exam strategies to maximize success chances for the PECB ISO/IEC 27002 Foundation certification. Emphasis is placed on understanding control objectives, implementation guidance, and real-world application scenarios.