ISO/IEC 27002 Foundation study guide
ISO/IEC 27002 Foundation · Work through your exam, one topic at a time.
The ISO/IEC 27002 Foundation credential is issued by PECB, a certification body, to candidates who pass its exam after attending the corresponding training course. It is not an accredited personnel certification in the sense of ISO/IEC 17024 and this page has no affiliation with PECB; it is an independent study aid. The certificate demonstrates general knowledge of the information security controls in ISO/IEC 27002, which the course describes as grouped into four themes: organizational, people, physical, and technological. The training is aimed at managers and consultants who want to know more about those controls, professionals engaged in or responsible for information security management, people seeking knowledge of the main processes of an information security management system and its controls, and individuals interested in a career in information security. Topics on this exam: Fundamental principles and concepts of information security, cybersecurity, and privacy and Information security controls based on ISO/IEC 27002. The ISO/IEC 27002 Foundation study guide has 2 sections and about 654 words.
01Fundamental principles and concepts of information security, cybersecurity, and privacy
This domain tests the vocabulary and mental models behind ISO/IEC 27002. Expect definitions from ISO/IEC 27000, the CIA triad, risk terms, and clear distinctions between information security, cybersecurity, and privacy. Information security is the preservation of confidentiality, integrity, and availability of information. Confidentiality means information is not disclosed to unauthorized parties; integrity means it is accurate and complete; availability means it is accessible when needed.
336 words, about 2 min02Information security controls based on ISO/IEC 27002
This domain tests how ISO/IEC 27002 organizes, selects, and describes information security controls. Expect the 2022 control themes, control attributes, and the link to risk treatment and the Statement of Applicability. ISO/IEC 27002:2022 provides guidance on 93 controls in four themes : Organizational (37), People (8), Physical (14), and Technological (34). It is guidance, not a certifiable management system standard; ISO/IEC 27001 contains the requirements and Annex A.
318 words, about 2 min