ISO/IEC 27002 Manager

PECB states the exam covers two competency domains: fundamental principles and concepts of information security, cybersecurity, and privacy, and information security controls based on ISO/IEC 27002. The course agenda mirrors this, covering introduction to the standard, information assets, people, physical and operational controls, incident management, and monitoring of controls.

PECB lists managers involved in implementing an ISMS based on ISO/IEC 27001, IT professionals and consultants seeking to enhance their information security knowledge, members of an ISMS implementation or information security team, and individuals responsible for information security in an organization. The stated prerequisites are a fundamental understanding of ISO/IEC 27002 and comprehensive knowledge of information security.

The course runs three days. Day 1 introduces ISO/IEC 27002; Day 2 covers information assets, people controls, physical controls, and operational security controls; Day 3 covers information security incident management and monitoring of information security controls, followed by the certification exam. Training and examination fees are included in the course price.

Yes, under a stated condition: candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial exam date. PECB directs candidates to its Examination Rules and Policies for further detail on exam administration.

Two options are shown. The PECB Certified ISO/IEC 27002 Provisional Manager requires the exam or equivalent and signing the PECB Code of Ethics, with no experience. The full Manager credential additionally requires two years of professional experience, including one year in information security management, and 200 hours of information security management activities.

PECB states the activities should follow best implementation and management practices and include drafting an ISMS implementation plan, managing an information security implementation project, implementing information security processes, and selecting and implementing information security controls. The full credential requires two years of professional experience, including one year of work experience in information security management.

Participants receive training material containing over 350 pages of information and practical examples. The course is based on both theory and best practices, with exercises and quizzes whose structure is similar to the certification exam. Attendees also receive an attestation of course completion worth 21 CPD (Continuing Professional Development) credits.

Work through the material in the course sequence: first the fundamentals of information security, cybersecurity, and privacy and how ISO/IEC 27002 relates to ISO/IEC 27001; then the control areas (information assets, people, physical, operational); finally incident management and monitoring. Use the quizzes as diagnostic checks, since their structure mirrors the exam.

The published prerequisites point to two risks: arriving with only a vague understanding of ISO/IEC 27002, and lacking comprehensive information security knowledge. Another is treating the course as pure theory rather than practicing the exercises and quizzes. Candidates should also confirm their experience hours early, since the full Manager credential needs 200 hours of information security management activities.

No. This is an independent study resource written for candidates preparing for the exam. It is not affiliated with, endorsed by, or sponsored by PECB or ISO/IEC. Always confirm exam format, scheduling, fees, and certification requirements directly with PECB and its Examination and Certification Program documentation before you enroll or book.