ISO/IEC 27002 Manager case studies
ISO/IEC 27002 Manager · Put your knowledge to work in context.
The PECB Certified ISO/IEC 27002 Manager credential is a professional certification for people who select, implement, and manage information security controls using ISO/IEC 27002, particularly as part of an information security management system (ISMS) built on ISO/IEC 27001. PECB positions the course for managers involved in ISMS implementation, IT professionals and consultants who want to strengthen their information security knowledge, members of an ISMS or information security team, and anyone responsible for information security in an organization. The ISO/IEC 27002 Manager case studies are 5 cases and about 4,924 words.
1Two Risk Matrices, One Board Dashboard
Meridian Logistics has grown by acquisition. Its corporate risk register uses a 5x5 matrix in which likelihood 3 means 'expected roughly once in three years'; the port-operations unit acquired 14 months ago still uses a 4x4 matrix in which likelihood 3 means 'expected more than once a year'.
1,032 words, about 5 min2Reusing Support Transcripts for Model Training
Northbridge Utilities records about 1,100 customer-support chats and calls each day. The privacy notice says recordings are used 'to resolve your enquiry and for quality assurance' and are deleted after 90 days.
924 words, about 5 min3Orphan Accounts After the Merger
Two insurers merged 18 months ago and integration was deferred. Helios, the acquirer with 3,400 staff, runs a single directory with automated joiner, mover and leaver provisioning.
977 words, about 5 min4Detection Gaps at a Payments Processor
A 900-person payments processor runs a SIEM ingesting roughly 40,000 events per second from 2,300 endpoints, 60 servers and 14 network devices. Only 3 of the 14 network devices forward logs.
931 words, about 5 min5The Click-Through Cloud Contract
A mid-sized European insurer outsources its customer claims portal to a SaaS provider running on a hyperscale cloud, with sub-processors in three countries. The contract is the provider's standard click-through terms: 99.5% availability, no audit rights, no breach-notification deadline, and sub-processor changes announced 30 days in advance on a public status page.
1,060 words, about 5 min