PECB ISO 28000 Foundation study guide
PECB ISO 28000 Foundation · Work through your exam, one topic at a time.
The PECB Certified ISO 28000 Foundation credential is an entry-level certificate showing general knowledge of ISO 28000 requirements for a security management system (SeMS), and the ability to contribute to SeMS implementation projects. The associated training course presents the basic concepts and principles of security management and gives a general explanation of ISO 28000 requirements, covering top management commitment, security policy, security strategies, procedures, processes and treatments, performance evaluation, and continual improvement. It is intended for managers and consultants seeking knowledge about basic security management concepts and principles, professionals wishing to become acquainted with ISO 28000 requirements for a SeMS, individuals engaged in or responsible for security management activities in their organizations, and individuals wishing to pursue a career in security management. The two-day agenda runs from introduction to security management, the SeMS, and clauses 4-6 of ISO 28000 on day one, to clauses 7-10 and the certification exam on day two. Topics on this exam: Fundamental concepts and principles of security management and an SeMS based on ISO 28000 and ISO 28000 requirements for a security management system - Clauses 4 to 10. The PECB ISO 28000 Foundation study guide has 2 sections and about 782 words.
01Fundamental concepts and principles of security management and an SeMS based on ISO 28000
This domain checks whether you can explain security management as a management discipline, not a guard-service checklist. You need to define a security management system (SeMS), describe the purpose and benefits of ISO 28000, and apply principles such as risk-based thinking, process approach, leadership, and continual improvement.
398 words, about 2 min02ISO 28000 requirements for a security management system - Clauses 4 to 10
This domain tests clause-by-clause requirements. You must know what each clause demands and what evidence an auditor would look for, not just the definitions.
384 words, about 2 min