This course details the information security controls based on ISO/IEC 27002:2022. It intends to provide an overview of the 93 controls required for an Information Security Management System (ISMS) as contained in Annex A of ISO/IEC 27001:2022.

At the end of this course participants should be able to

• Refresher an overview of the controls (retained and merged from the previous version)
• Know the changes to ISO 27002:2022
• Implement new controls in the updated ISO27002 if applicable to the organization

Course Outline

Day 1

Section 1: Introduction to ISO/IEC 27002

Section 2: Roles and responsibilities, assets, and policies

Section 3: Organizational Controls

Section 4: People Controls

Day 2:

Section 5: Physical Controls

Section 6: Technical Controls

Section 7: Monitoring information security controls

Section 8: Continual Improvement

Delivery Methodologies

• Online Lecture and Discussion

• Online quizzes

• Lecture sessions are illustrated with practical questions and examples

• Practical exercises include examples and discussions

Course Duration

• 2 days ( 4 hour per session)

Delivery Methodologies

• Lecture
• Individual activities
• Plenary Discussions

This course is recommended for

• Individuals interested in Information Security Management and Controls
• Those that are seeking knowledge about the main processes of an Information Security Management System and Controls
• Managers seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
• Information Security team members
• Expert advisors in information technology
• IT professionals
• Privacy officers