ISO/IEC 27002 Manager training enables you to acquire the necessary knowledge to support an organization in implementing and managing Information Security Controls based on ISO/IEC 27002. During this training course, you will also gain a thorough understanding of best practices of Information Security Controls.
After understanding all the necessary concepts of Information Security Controls, you can sit for the exam and apply for a Certified ISO/IEC 27002 Manager credential. By holding a Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to implement and manage Information Security controls in an organization.
A fundamental understanding of ISO/IEC 27002 and comprehensive knowledge of Information Security.
Day 1: Introduction to Information Security controls as recommended by ISO/IEC 27002
Day 2: Information Security requirements and objectives based on ISO/IEC 27002
Day 3: Monitoring, measurement, analysis and evaluation of Information Security Controls and Certification Exam
The Certified ISO/IEC 27002 Manager exam fully meets the requirements of the Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of Information Security
Domain 2: Information Security Controls based on ISO/IEC 27002
For more information about exam details, please visit Examination Rules and Policies.
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about ISO/IEC 27002 certifications and the certification process, please refer to the Certification Rules and Policies.
The requirements for Manager Certifications are:
|Credential||Exam||Professional experience||ISM project experience||Other requirements|
|Certified ISO/IEC 27002 Provisional Manager||Certified ISO/IEC 27002 Manager exam or equivalent||None||None||Signing the Code of Ethics|
|Certified ISO/IEC 27002 Manager||Certified ISO/IEC 27002 Manager exam or equivalent||Two years: One year of work experience in Information Security Management||Information Security Management activities: a total of 200 hours||Signing the Code of Ethics|
To be considered valid, these information security activities should follow best implementation and management practices and include the following:
1.Drafting an ISMS plan
2.Managing an Information Security project
3.Implementing Information Security processes
4.Managing Information Security processes
5.Selecting and implementing Information Security controls
6.Implementation of IT strategies and Information Security architectures
7.Audit and evaluation of Information Security controls