ISO / IEC 27002 Foundation

Certification Overview

ISO / IEC 27002 Foundation

Exam Code: ISO-IEC-Fnd

ISO/IEC 27002 Foundation training enables you to learn the basic elements to implement Information Security Controls as specified in ISO/IEC 27002.  During this training course, you will be able to understand how ISO/IEC 27001 and ISO/IEC 27002 are related to ISO/IEC 27003 (Guidelines for the implementation of ISMS), ISO/IEC 27004 (Measurement of Information Security) and ISO/IEC 27005 (Risk Management in Information Security). 

The ISO/IEC 27000 series of standards provides best practice guidelines for information security management,risks, and controls within the context of an overall Information Security Management System. These best practices are not covered in ITIL. ISO/IEC 27002 is closely aligned with the ISO/IEC 27001 Standard and serves as a practical guideline for all members of staff as they initiate, implement and maintain an Information Security Programme.

e-Competence Framework (e-CF)

The mapping of this certificate against the e-Competence Framework. To know more on e-Competence Framework (e-CF) visit, ECF



Exam Information

The exam comprises of 40 Multiple Choice Questions out of which the candidate needs to score 70% (28 out of 40 correct) to pass the exam.

The total duration of the exam is 1 hours (60 Minutes).

  • The exam is delivered through ProctorU in a proctored mode. With a webcam and a reliable internet connection, exam can be taken anytime and anywhere.
  • Upon purchasing the Premium Package or an Exam Voucher Code, a voucher code with two attempts will be assigned to your login profile.
  • The Exam Voucher included in the Premium Package or purchased separately is valid for two (2) attempts. If you are unable to pass the exam within these two attempts, you can purchase a new voucher code, which will grant you an additional two attempts.

The ISO/IEC 27002 Foundation Certificate is valid for life.

Displaying your certificate

  • Remember, when labelling a product or system as certified to an ISO standard:
  • Don't say: "ISO certified" or "ISO certification"
  • DO say: "ISO 9001:2008 certified" or "ISO 9001:2008 certification" (for example).

N/A

The ISO/IEC 27002 Foundation Certification has no pre-requisites (Completion of an E-Course is not mandatory from GAQMBok portal), but we highly recommend doing the E-Course as maximum number of questions are drawn from the E-Course in the actual exam.

Course Outline

Topics Covered in the Exam

  • The Contents Of ISO/IEC 27002 and Its Relationship To ISO/IEC 27001
  • Key Roles and Responsibilities Of All Staff Responsible For Information Security
  • Information and Data Relationships (Security, Governance, Assurance)
  • Defining Threats and Vulnerabilities and Understanding Risk Management
  • Risk Analysis With An Understanding Of Impacts, Likelihood and Probability
  • Required Policies and Information Security Plan
  • External Relationships With 3rd Party Organisations and Individuals
  • Information Architecture and Data Flows
  • Protective Marking and The Relationship To Impact (Risk)

Target Audience

Target Audience

  • For anyone in an organisation who is interested or responsible for the implementation of an effective Information Security Programme based on ISO/IEC 27002 or ISO/IEC 27001 standards.
  • It is particularly suited for Managers who are responsible in anyway for the security or availability of confidential information assets.
  • Members of an information security team
  • Expert advisors in information technology
  • Technical experts wanting to prepare for an information security function or for an ISMS project management function

Registration Process for E-Course or E-Book and Exam

Exam
Voucher

  • Validity: 240 Days
  • Price: 150 USD
  • Please Read Carefully:

    1) The Exam Voucher is valid for two (2) attempts.

    2) You will receive your voucher code within 24 business hours.

    3) You can schedule your exam through ProctorU.

Exam Registration

  • To Register for an Exam
Click Here