ISO/IEC 27002:2022 Information Security Controls Implementation

Course Objectives

This course aims to assist organizations to implement commonly accepted information security controls, either as part of an ISO/IEC 27001 information security management system (ISMS) or as a standalone activity through the use of ISO/IEC 27002.

You’ll be able to:

• Explain the background and purpose of ISO/IEC 27002
• Explain the scope and structure of ISO/IEC 27002
• Recognize the different best practice controls recommended by ISO/IEC 27002
• Define the benefits of implementing controls from ISO/IEC 27002
• Evaluate how to use the controls in conjunction with an ISO/IEC 27001 based
• ISMS
• Demonstrate how to choose the appropriate controls relevant to you
• Implement chosen controls from ISO/IEC 27002

Target Audience

Anyone who wants to learn:

• To identify and understand commonly accepted information security controls
• How risks can be reduced to an acceptable level using controls
• How to determine which controls are the most appropriate to implement
• Practical implementation of ISO/IEC 27002 controls
• The benefits and pitfalls associated with the use of different controls
• The course is applicable to representatives from any size or type of organization who is, or will be, involved in planning, implementing, maintaining, supervising or assessing information security, as part of an ISO/IEC 27001 ISMS or a standalone system.

Methodology

We recommend that you have a basic understanding of information security principles and terminology.

We also recommend that you have an understanding of the information risks faced by their organization.

A basic understanding of ISO/IEC 27001, information technology and information risk management may be an advantage.

Some delegates on this course will have already attended our Information Security Management System (ISMS) Requirements of ISO 27001, or Information Security Management System (ISMS) Implementing ISO/IEC 27001 course.

Course Modules

Day 1

• Welcome, benefits to you and course aim
• Introductions, objectives and structure

Module 1: ISO/IEC 27002 Background and introduction

Module 2: Clause 5: 5.1 – 5.4

Module 3: Clause 5: 5.5 – 5.13

Module 4: Clause 5: 5.14 – 5.18

Module 5: Clause 5: 5.19 – 5.23

Module 6: Clause 5: 5.24 – 5.30

Module 7: Clause 5: 5.31 – 5.37

• End of Day

Day 2

Module 8: Clause 6

Module 9: Clause 7: 7.1 – 7.4

Module 10: Clause 7: 7.5 – 7.14

Module 11: Clause 8: 8.1 – 8.9

Module 12: Clause 8: 8.10 – 8.16

Module 13: Clause 8: 8.17 – 8.23

Module 14: Clause 8: 8.24 – 8.28

Module 15: Clause 8: 8.29 – 8.34

• • Review and final questions