ISO27002 Foundation

ByPECB

Price

From €499

Delivery typePrivate 1-1 CapacityUnlimited Level Beginner Duration 5 days 0 Lesson Language All languages

Description

ISO/IEC 27002 Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.

Why Should You Attend?

ISO/IEC 27002 Foundation training course enables participants to learn the basic concepts related to the implementation and management of information security controls based on the guidelines of ISO/IEC 27002. Through this training course, participants will be able to identify the information security controls of ISO/IEC 27002 that are categorized into four themes: organizational, people, physical, and technological. The training course also provides information on how ISO/IEC 27002 is related with other standards, such as ISO/IEC 27001 and ISO/IEC 27003.

The training course is followed by an exam. If you pass, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate. This certificate demonstrates that you have a general knowledge of ISO/IEC 27002 information security controls.

Who Can Attend?

This training course is intended for:

Managers and consultants seeking to know more about information security controls of ISO/IEC 27002
Professionals engaged in or responsible for information security management
Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls
Individuals interested to pursue a career in information security

Learning Objectives

By successfully completing this training course, you will be able to:

Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
Discuss the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
Interpret the ISO/IEC 27002 organizational, people, physical, and technological controls in the specific context of an organization

Educational Approach

This training course contains lecture sessions that are illustrated with practical questions and examples.
The participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.
The structure of quizzes is similar to that of the certificate exam.

Prerequisites

There are no prerequisites to participate in this training course.

More details

Day 1: Introduction to ISO/IEC 27002 and organizational controls
Day 2: People, physical, and technological controls and certificate exam

The exam fully meets the requirements of the PECB Examination and Certificate Programme. It covers the following competency domains:

Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy
Domain 2: Information security controls based on ISO/IEC 27002

For specific information about the exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.

Upon the successful completion of the exam, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate. The certificate requirements for ISO/IEC 27002 Foundation are:

Credential	Exam	Professional experience	ISCMS project experience	Other requirements
PECB Certificate Holder in ISO/IEC 27002 Foundation	Pass the PECB ISO/IEC 27002 Foundation exam	None	None	Signing the PECB Code of Ethics

Our training courses are available in several delivery formats to suit your needs. Please note that pricing varies depending on the selected format. Some options, such as live or in-person classes, may require a custom quote based on availability and logistics.

Delivery Option	Self-paced	Virtual Class	In-Person Class	4-hour package	Intra-Entreprise
Price	€499.-	€999.-	€1099.-	€899.-	On request

Certificate and examination fees are included in the price of the training course.
Training material containing over 200 pages of information and practical examples will be distributed.
An attestation of course completion worth 14 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
In case of exam failure, you can retake the exam within 12 months for free.

FAQs

What is the ISO/IEC 27002 Foundation course?

The ISO/IEC 27002 Foundation course is an introductory training designed to provide a clear, structured understanding of the best practices for information security controls as outlined in the ISO/IEC 27002:2022 standard. It helps participants grasp the purpose and application of these controls within the broader framework of an Information Security Management System (ISMS). While ISO/IEC 27001 defines the requirements for information security, ISO/IEC 27002 serves as a detailed guideline for the selection, implementation, and management of security controls. This course offers a practical entry point into the world of ISO-based information security, especially for those seeking to understand the "how" behind effective cybersecurity governance.

Who should take the ISO/IEC 27002 Foundation course?

The course is intended for a broad audience, including IT professionals, compliance officers, junior security analysts, and anyone interested in acquiring a baseline understanding of ISO-standardized security controls. It is especially useful for individuals who are new to information security, supporting ISO/IEC 27001 implementation projects, or working in environments where data protection and risk management are priorities. Whether you're part of a security team or supporting one from another department, this course will help you understand how the controls contribute to an organization’s overall security posture.

What will I learn in the ISO/IEC 27002 Foundation course?

Participants will learn the foundational concepts of ISO/IEC 27002:2022, including the structure of the 93 controls grouped into four main domains: organizational, people, physical, and technological. The course explains how these controls are applied in practice, and how they can be selected and tailored based on the results of a risk assessment. It also covers the new classification attributes introduced in the 2022 version, such as control types, cybersecurity concepts, and operational capabilities. By the end of the training, learners will understand how ISO/IEC 27002 supports the implementation of ISO/IEC 27001 Annex A controls and how it can be used to guide the development of a security control framework.

How long is the ISO/IEC 27002 Foundation course?

The course runs for two days. It combines engaging lectures, interactive discussions, and sometimes practical exercises to help participants relate the content to real-world security scenarios. The concise duration makes it ideal for professionals looking to gain valuable knowledge without needing deep technical expertise or prior ISO experience.

Is there a certification exam included in the course?

Yes, the course includes a certification exam at the end. Participants who successfully pass the exam receive the ISO/IEC 27002 Foundation Certificate, which validates their basic understanding of information security controls and their ability to support ISO/IEC 27001-aligned projects. This credential is a great starting point for those looking to build a career in cybersecurity, compliance, or risk management.

Classroom Format

This course is available in both virtual and in-person formats. If no sessions are listed in the agenda, feel free to contact us. Please note that requesting a quote is required for classroom training, as prices differ from the self-paced option and the course won't be delivered without a formal request.

4-Hour Assistance Pack

For any self-paced or e-learning package, you have the option to purchase a 4-hour assistance pack. This pack allows you to ask questions and receive answers from our experts. Please contact us for more details.

Price

From €499

Delivery typePrivate 1-1 Level Beginner Training 5 days Language All languages

By clicking on “Buy Now”, you give your explicit consent that the contract will take effect before the withdrawal period ends.(i.e. at the time of the purchase).

Shopping cart

ISO27002 Foundation

Why Should You Attend?

Who Can Attend?

Learning Objectives

Educational Approach

Prerequisites

More details

Classroom Format

4-Hour Assistance Pack

You might be interested in

ISO 27701 Foundation

ISO 27701 Foundation

ISO 27701 Lead Implementer

ISO 27701 Lead Implementer

ISO 27701 Lead Auditor

ISO 27701 Lead Auditor

ISO 27035 Lead Incident Manager

ISO 27035 Lead Incident Manager

Sign up to receive our latest updates

Get in touch

Expertise

The Cyber Academy

Social networks

Shopping cart

ISO27002 Foundation

Why Should You Attend?

Who Can Attend?

Learning Objectives

Educational Approach

Prerequisites

More details

Share

You might be interested in

Sign up to receive our latest updates

Get in touch

Expertise

The Cyber Academy

Social networks

Learn how Cyber Academy can help you

Receive your catalogue Now

Login with your site account

Search

Modal title