Institute for Governance Research and Certification International
Researching Needs. Certifying Capabilities.
Institute for Governance Research and Certification International
Researching Needs. Certifying Capabilities.
Grow Your Career
ISO/IEC 27002:2022 Practitioner
This certification endorses a comprehensive knowledge on Information Security Management System control guidance standard ISO/IEC 27002:2022 as an IS Controls Practitioner.
Though not mandatory to follow completely or additional control requirement may exist, ISO/IEC 27002:2022 still provides a comprehensive set of controls for an organisation to roll out their ISMS effectively. This standard does not simply specify a set of controls, rather, specify areas of controls for an organisation to further interpret and implement in a most suitable manner through a set of appropriate and specific controls.
High level syllabus
​
-
The concept of Information Security
-
Information Security Management System (ISMS) components
-
ISO/IEC 27001 standard clauses explanation
-
ISO/IEC 27003 guidance explanation
-
ISO/IEC 27005 risk management guidance discussion with a case study
-
ISO/IEC 27002:2022 controls discussion
-
Control interpretations with a variety of examples​
-
Contextualisation of controls - control category and specific controls derivation
-
Risk - control relationship
-
-
Certification aspects
-
ISMS lifecycle
-
Relevance of other controls
-
Case study based exercises
Intended Audience
-
Information Security Officer / CISO / CIO
-
Compliance Officers
-
Legal Officers
-
GRC Managers
-
Business excellence professionals
-
Risk and compliance professionals
-
Consultants
-
Information Security Auditors and assessors
-
Anyone who wants to have a comprehensive understanding of information security controls and ISMS aspects
Certification examination
​
Blooms taxonomy levels 1 - 5 (Mixed)
Multiple choice single answer questions, including case study based
40 (30+10) Questions | 90 Minutes | Computer based