
ISO/IEC 27002 Foundation
Information Security Controls
- Level
- Foundation
- Duration
- 2 days
- Exam
- Confirmed on request
- Language
- EN
- Format
- Self-Study
- CPD credits
- 14
- Certification
- PECB Certificate Holder in ISO/IEC 27002 Foundation
Course facts from PECB Training Course Catalog 2026; pecb.com course page.
ISO/IEC 27002 Foundation training course provides information on the fundamental concepts of information security, cybersecurity and privacy based on ISO/IEC 27002.
Why Should You Attend?
ISO/IEC 27002 Foundation training course enables participants to learn the basic concepts related to the implementation and management of information security controls based on the guidelines of ISO/IEC 27002. Through this training course, participants will be able to identify the information security controls of ISO/IEC 27002 that are categorized into four themes: organizational, people, physical, and technological. The training course also provides information on how ISO/IEC 27002 is related with other standards, such as ISO/IEC 27001 and ISO/IEC 27003.
The training course is followed by an exam. If you pass, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate. This certificate demonstrates that you have a general knowledge of ISO/IEC 27002 information security controls.
Who should attend?
This training course is intended for:
- Managers and consultants seeking to know more about information security controls of ISO/IEC 27002
- Professionals engaged in or responsible for information security management
- Individuals seeking to gain knowledge about the main processes of an information security management system and information security controls
- Individuals interested to pursue a career in information security
Learning objectives
By successfully completing this training course, you will be able to:
- Explain the fundamental concepts of information security, cybersecurity, and privacy based on ISO/IEC 27002
- Discuss the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
- Interpret the ISO/IEC 27002 organizational, people, physical, and technological controls in the specific context of an organization
Educational approach
- This training course contains lecture sessions that are illustrated with practical questions and examples.
- The participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.
- The structure of quizzes is similar to that of the certificate exam.
Prerequisites
There are no prerequisites to participate in this training course.
Course agenda
Day 1: Introduction to ISO/IEC 27002 and organizational controls
Day 2: People, physical, and technological controls and certificate exam
Examination
The exam fully meets the requirements of the PECB Examination and Certificate Programme. It covers the following competency domains:
Domain 1: Fundamental principles and concepts of information security, cybersecurity, and privacy
Domain 2: Information security controls based on ISO/IEC 27002
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
Certificate requirements
Upon the successful completion of the exam, you can apply for the “PECB Certificate Holder in ISO/IEC 27002 Foundation” certificate.
The certificate requirements for ISO/IEC 27002 Foundation are:
| Designation | Exam | Professional experience | MS audit/assessment experience | ISCMS project experience | Other requirements |
|---|---|---|---|---|---|
| PECB Certificate Holder in ISO/IEC 27002 Foundation | Pass the PECB ISO/IEC 27002 Foundation exam | None | None | None | Signing of the PECB Code of Ethic |
General Information
- Certificate and examination fees are included in the price of the training course.
- Training material containing over 200 pages of information and practical examples will be distributed.
- An attestation of course completion worth 14 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- In case of exam failure, you can retake the exam within 12 months for free.
For additional information, please contact us at support@pecb.com.
The text above is the publisher's own course description, reproduced verbatim from pecb.com course page (retrieved 2026-10-02). PECB is a registered trade-mark of PECB Group Inc. and is used under license.
After you buy
- Order confirmedYou receive a receipt from Stripe and a note from Valment with what happens next.
- Course assignedValment assigns the course to your PECB account through the partner dashboard. The participant needs a PECB account before you pay; creating one is free at pecb.com.
- Materials and platformFor self-study and eLearning the training material is in the myPECB dashboard once the course is assigned — slides and exercises, or the video lessons and the eLearning platform.
- Exam and certificateThe PECB exam is included. You schedule it when you are ready and sit it online, supervised by PECB; on passing, you apply for the certificate at no additional cost.
The rungs beside it
ISO/IEC 27001 Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Cybersecurity Foundation
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27005 Lead Risk Manager
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
ISO/IEC 27001 Lead Implementer
- The PECB exam is included
- The certificate is PECB’s to issue once its requirements are met
Next in this line
PECB is a registered trade-mark of PECB Group Inc. and is used under license.
© Professional Evaluation and Certification Board 2026. All rights reserved.