ISO/IEC 27002 Lead Manager

Audience
The course is aimed at managers, consultants, security officers, IT and information security personnel, compliance and risk professionals, as well as members of ISMS/security teams who are responsible for or will contribute to the implementation and operation of information security controls in the organization. It is also suitable for those who want to strengthen competence in the selection, implementation and management of security measures based on international standards.

Learning objectives
Participants will gain in-depth knowledge of the ISO/IEC 27002 standard and how safety controls in the standard are interpreted and applied in a specific organizational context. They will learn methods and techniques for selecting, implementing, directing and maintaining information security controls, both organizational, personnel, physical and technical controls. The course will provide an understanding of how these controls are integrated into an ISMS, and how the controls can be adapted to the risk profile, regulations and needs of the business.

After completing the course you will be able to

• Explain the basic concepts, principles and contexts of information security, cybersecurity and privacy underlying ISO/IEC 27002
• Understand the relationship between ISO/IEC 27002 and related standards/frameworks (e.g. ISO/IEC 27001)
• Interpret ISO/IEC 27002 controls in light of your organization's context and risks
• Plan, select and implement appropriate information security controls (organizational, human, physical, technical)
• Conduct and manage security controls on an ongoing basis, including testing, monitoring, incident management, supplier/supply chain related controls, and maintenance
• Support or drive the implementation of an ISMS with good security controls adapted to the needs of the business