ISO 27002 Lead Manager study guide
ISO 27002 Lead Manager · Work through your exam, one topic at a time.
The PECB Certified ISO/IEC 27002 Lead Manager is a professional credential for people who determine, implement, and manage information security controls in an ISMS aligned with ISO/IEC 27001. PECB positions the course for managers and consultants who want to deepen their knowledge of control implementation, for staff responsible for information security, compliance, risk, or governance, for IT professionals and consultants, and for members of an ISMS implementation or information security team. The ISO 27002 Lead Manager study guide has 5 sections and about 1,686 words.
01Fundamental Principles and Concepts of Information Security, Cybersecurity and Privacy
Domain 1 checks whether you can use ISO/IEC 27000-series vocabulary precisely and separate three concerns that overlap in practice: information security, cybersecurity and privacy. Questions here are definitional and comparative, so marks come from exact wording and from knowing which standard owns which term.
359 words, about 2 min02ISMS and Initiation of ISO/IEC 27002 Control Implementation
Domain 2 tests how an ISO/IEC 27001 ISMS is established and how the 93 controls of ISO/IEC 27002:2022 are selected, justified and launched. Expect questions on the relationship between the two standards, the Statement of Applicability (SoA), risk treatment and the five control attributes.
338 words, about 2 min03Organizational and People Controls (ISO/IEC 27002 Clauses 5 and 6)
Domain 3 covers the largest theme - 37 organizational controls in clause 5 - plus the 8 people controls in clause 6. Questions test which control addresses which situation and how organizational and people controls interlock with technological ones.
325 words, about 2 min04Physical and Technological Controls (ISO/IEC 27002 Clauses 7 and 8)
Domain 4 covers the 14 physical controls in clause 7 and the 34 technological controls in clause 8 - the largest technical block. Questions ask you to map a scenario to the right control and to recognise defence in depth.
322 words, about 2 min05Performance Measurement, Testing and Monitoring of Controls
Domain 5 tests how you prove controls actually work: monitoring, measurement, analysis, evaluation, internal audit, management review and improvement. Expect questions distinguishing an activity metric from an effectiveness measure.
342 words, about 2 min