ISO/IEC 27002 Foundation case studies
ISO/IEC 27002 Foundation · Put your knowledge to work in context.
The ISO/IEC 27002 Foundation credential is issued by PECB, a certification body, to candidates who pass its exam after attending the corresponding training course. It is not an accredited personnel certification in the sense of ISO/IEC 17024 and this page has no affiliation with PECB; it is an independent study aid. The ISO/IEC 27002 Foundation case studies are 5 cases and about 2,278 words.
1The Board's 'All Controls' Mandate
A 900-person insurance broker has completed its first gap assessment against ISO/IEC 27001. The board reads that ISO/IEC 27002:2022 contains 93 controls and directs the CISO to implement all of them before the next surveillance audit in six months, citing 'full compliance' as the goal.
484 words, about 2 min2Location Tracking in a Delivery App
A food-delivery startup with 300 employees and 1.2 million users plans a feature that collects precise GPS location every 30 seconds, including when the app is closed, to 'improve delivery estimates and detect fraud.' The updated terms pre-tick a consent box, and the privacy notice says data may be used to 'improve services.' Location data is retained indefinitely in a cloud data lake; analytics staff can join it with phone numbers and order history. Marketing wants to sell 'movement insights' to city planners.
486 words, about 2 min3Break-Glass Access for a Payment Vendor
A 450-person fintech runs a payment platform in a single cloud region. The platform vendor's support engineers need break-glass administrative access to production to meet a 30-minute incident SLA.
436 words, about 2 min4Ransomware and the Missing Detection Layer
A 200-person engineering firm is recovering from a ransomware incident that encrypted 60% of its file shares and the backup catalog. Immutable cloud backups survived, but restoration took nine days.
447 words, about 2 min5Shared Reception, Lost Badges and an Unencrypted USB
A 120-person design studio leases two floors in a shared building. Reception is shared with three other tenants, and the landlord's cleaning contractor holds a master badge.
425 words, about 2 min