Duration
1 day
Overview
Many organizations have a need to control information and information systems. ISO/IEC 27002:2022 provides a set of controls that can be used to manage their information security risks, either as part of a conformant ISO/IEC 27001 Information Security Management System or a set of globally accepted set of best practices that can be implemented in isolation or as a foundation for organizational guidelines. This course provides a review to the updated standard from ISO/IEC 27002:2013, what the key differences are and how an organization may implement these changes should they choose to do so.
Course aim
This one day course will provide knowledge required to update and manage your information security controls when aligned with ISO/IEC 27002:2022.
How will I benefit?
This course will help you:
- By attending this course delegates will learn how to effectively prepare an information security controls set using the guidance in ISO/IEC 27002:2022
- You will gain an understanding of the new structure of the standard
- Understand the new controls in ISO/IEC 27002:2022
What will I learn?
Upon completion of this training, delegates will be able to:
- Define the changes to ISO/IEC 27002:2022
- Determine how to use the control attributes in the management of ISO 27002 control sets
- Demonstrate how to identify organizational attributes
- Implement new controls within ISO/IEC 27002 if relevant to their organization
Who should attend?
ISO/IEC 27001 qualified implementers and auditors or those with equivalent knowledge and experience. Suggested job roles include:
- Those responsible for implementing and managing an information security management system.
- Those with responsibilities for auditing their information security management system
How will I learn?
Our high-impact accelerated learning approach increases learning by improving knowledge retention and skill application. This course is activity-based, resulting in a deeper understanding of the material and a greater impact on job performance.
What will I gain?
On completion, you’ll be awarded an internationally recognized BSI training course certificate.
Prerequisites
There are no formal prerequisites for this course.
Agenda
Time
Topic
09.00
17:00
Benefits to you, welcome and introductions
Course aims, objectives and structure
Module 1: ISO/IEC 27002:2022 overview
- ISO/IEC 27002 background
- Control correspondence
- Control attributes
- Control layout
- Organizational attributes
Module 2: Clause 5 controls
- Threat intelligence
- Information security for use on cloud services
- ICT readiness for business continuity
Module 3: Clause 6 and clause 7 controls
- Physical security monitoring
Module 4: Clause 8 controls
- Configuration management
- Information deletion
- Data masking
- Data leakage prevention
- Monitoring activities
- Web filtering
- Secure coding
Review and final questions
End of the course
Programme scope, delivery arrangements and suitability are confirmed during enquiry.