PECB Certified ISO/IEC 27002 Lead Manager

ISO/IEC 27002 is the companion standard to ISO/IEC 27001: 27001 requires controls, 27002 explains each of the 93 controls and how to implement it. The PECB Certified ISO/IEC 27002 Lead Manager credential shows you can select, implement and measure information security controls to treat the risks an organization has identified.

Security managers and consultants who choose and run the controls inside an ISO/IEC 27001 program, people responsible for information security, compliance, risk or governance, and members of an ISMS implementation team.

PECB asks for a fundamental understanding of ISO/IEC 27002 and a working knowledge of information security controls. ISO/IEC 27001 Lead Implementer is not required, though many attendees hold it.

Day 1 covers the ISO/IEC 27002:2022 structure: 93 controls in four themes, the 11 new controls, and control attributes. Day 2 works through organizational and people controls: roles, policies, assets, access, suppliers, awareness. Day 3 covers physical and technological controls: secure areas, endpoints, networks, vulnerabilities, development. Day 4 covers incident management and how to test and monitor controls once they are in place. The four days follow PECB’s official course structure, with the exam at the end.

The exam covers 5 competency domains: fundamental principles of information security, cybersecurity and privacy; the ISMS and initiating ISO/IEC 27002 controls implementation; organizational and people controls; physical and technological controls; performance measurement, testing and monitoring of controls. Questions are weighted across the domains, and the course is organized so every domain is taught before you sit the exam.

The exam has 80 multiple-choice questions, a mix of standalone and scenario-based, and lasts 3 hours. It is open-book, and the passing score is 70%. Online exams are graded instantly.

Yes. Both the PECB certification exam and the certification fee are included in your course fee, and the exam is scheduled at the end of the course. There is nothing extra to buy to get certified.

Yes. We include one free exam retake within 12 months of your first attempt, and it is covered by your course fee.

ISO/IEC 27001 is the certifiable management system standard; its Annex A lists 93 controls. ISO/IEC 27002 is the detailed guidance for those same controls. Organizations certify to 27001 and use 27002 to do the implementation work, which is why 27002:2022 and 27001:2022 were revised together.

Lead Implementer builds and operates the whole management system. Lead Manager goes deep on one part of it: choosing, implementing and measuring the security controls. If you already have an ISMS and the controls are where it is weak, this is the course. Compare all of our PECB courses side by side on the PECB training courses page.

As of 2026 the current edition is ISO/IEC 27002:2022, which cut the control set from 114 to 93, grouped them into organizational, people, physical and technological themes, and added 11 new controls such as threat intelligence, cloud services security and data leakage prevention. This course teaches the 2022 edition.

Yes. PECB issues an attestation of course completion worth 31 CPD (Continuing Professional Development) credits to everyone who attends the course.

Yes. PECB is accredited to ISO/IEC 17024, the international standard for bodies certifying people, and its credentials are recognized internationally. Training Camp delivers the official PECB courseware as an authorized training partner.