ISO 27002 Lead Manager case studies

ISO 27002 Lead Manager · Put your knowledge to work in context.

The PECB Certified ISO/IEC 27002 Lead Manager is a professional credential for people who determine, implement, and manage information security controls in an ISMS aligned with ISO/IEC 27001. PECB positions the course for managers and consultants who want to deepen their knowledge of control implementation, for staff responsible for information security, compliance, risk, or governance, for IT professionals and consultants, and for members of an ISMS implementation or information security team. The ISO 27002 Lead Manager case studies are 5 cases and about 5,029 words.

The 'Anonymised' Ride Dataset: When Removing Names Is Not De-identification

Northwind Analytics (320 staff, Berlin and Lisbon) plans to release a dataset of 1.8 million ride-hailing trips to a university research partner, described internally as 'fully anonymised'. The extract keeps pickup and drop-off coordinates rounded to 50 metres, timestamps to the minute, fare, vehicle class, and a persistent rider identifier that is stable across all trips.

1,005 words, about 5 min 2

Scope, Exclusions and a Statement of Applicability Built Backwards

Meridian Components is a 2,400-person manufacturer with plants in Poland and Vietnam, a logistics subsidiary in Mexico acquired five months ago and still running its own ERP, and a group SAP S/4HANA instance hosted by a provider in the EU. Certification is planned for the fourth quarter next year.

1,034 words, about 5 min 3

Forty-Six Percent Attrition and a Leaver List Nobody Owns

Halcyon Support Group runs three contact centres - Manila, Bucharest and Leeds - handling payment-card disputes for 14 banking clients, with 900 agents and 46% annual attrition. Provisioning runs on email approvals: a team leader emails the service desk, which creates an account using a default password derived from the employee number.

1,026 words, about 5 min 4

Twelve Racks in Someone Else's Building

Vantage Health stores 4 PB of imaging data in 12 racks inside a multi-tenant colocation facility in Amsterdam. The provider owns the building, perimeter, CCTV and badge system; Vantage owns the racks and a cage door opened with a mechanical key.

982 words, about 5 min 5

A Green Dashboard and a Fourteen-Month-Old VPN Appliance

Orion Payments reports to its board each month: patch compliance 99.4%, phishing click rate 3%, open critical vulnerabilities 0, training completion 97%. In March an attacker entered through an internet-facing VPN appliance that had been unpatched for 14 months and moved laterally using a local administrator account shared by the database team.

982 words, about 5 min