Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

PECB Authorized Training Partner

PECB Certified ISO/IEC 27002 Lead Manager

PECB Authorized Boot Camp. Official courseware, expert instructors, exam, certification fee, free retake, and 31 CPD credits included. Four days on the 93 controls.

Verified for 2026 ISO-27002-LM Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official PECB

Authorized Training

PECB Authorized Training Partner

Exam Ready in Four Days. 93 Controls. Every One Measured.

For the people who run the controls inside an ISO 27001 program. Four days on selecting, implementing and measuring the 93 information security controls of ISO/IEC 27002:2022, with the PECB exam and one free retake included.

Program Abstract

REF: ISO-27002-LM 5
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 4

93 Controls. Zero Guesswork About Which Apply.

ISO/IEC 27002:2022 is the working manual behind ISO 27001 Annex A: 93 controls in four themes, 11 of them new. Four days on selecting the ones your risks justify, implementing them so they hold, and measuring them so you can prove it to an auditor.

Official PECB Training.

We deliver the official PECB courseware, taught live by PECB-certified instructors. Every module maps to the certification exam objectives.

System Integrity Check
Content Source PECB Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

We include your PECB certification exam in the course price. No surprise fees. You take the exam on the final day of your course.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your Included ($500 value) exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with CAT-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Free Retake Included.

If you do not pass on your first attempt, we include one free retake within 12 months, covered by your course fee. The exam is open-book: 80 multiple-choice questions in three hours.

Thursday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

PECB Authorized Training Partner

PECB Authorized Training Partner

Official PECB courseware taught live by PECB-certified instructors. Four days that follow the official course structure through to the exam.

5 exam domains

All 5 Exam Domains in Four Days

Information security fundamentals, the ISMS and initiating controls, organizational and people, physical and technological, and measurement.

Exam fee included

Exam and Certification Fee Included

The PECB exam is 80 multiple-choice questions, open-book, three hours, and both the exam and certification fees are in your course price.

ISO/IEC 27002:2022 controls

The 93 Controls, Explained

ISO/IEC 27002:2022 cut 114 controls to 93 across four themes and added 11 new ones. You learn to select, implement and measure each.

Free retake

Free Exam Retake

If you do not pass your first attempt, we include one free retake within 12 months of the exam, covered by your course fee.

CPD credits

31 CPD Credits

PECB issues an attestation of course completion worth 31 CPD credits you can put toward other certifications’ continuing-education requirements.

PECB Certified ISO/IEC 27002 Lead Manager

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    ISO 27002 Lead Manager
    Boot Camp Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3

    MODULE_ID: PECB-27002LM-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    ISO/IEC 27002:2022 Framework and Control Structure

    Course Objectives, Structure, and the PECB Certification Process
    L.01.1
    Standards and Regulatory Frameworks Around ISO/IEC 27002
    L.01.2
    Fundamental Concepts of Information Security, Cybersecurity, and Privacy
    L.01.3
    ISO/IEC 27002:2022 Revision: 114 Controls Consolidated to 93
    L.01.4
    Four Themes: Organizational, People, Physical, Technological
    L.01.5
    The 11 New Controls: Threat Intelligence to Web Filtering
    L.01.6
    Control Attributes: Type, Properties, Concepts, Capabilities, Domains
    L.01.7
    ISMS Under ISO/IEC 27001:2022 and Annex A Linkage
    L.01.8
    Statement of Applicability and Control Justification
    L.01.9
    Analyzing the Organization’s Existing Security Architecture
    L.01.10
    Understanding Information Security Risks as Control Drivers
    L.01.11
    Using Attributes to Build Control Views for Stakeholders
    L.01.12
    Mapping ISO/IEC 27002 to NIST CSF 2.0 and CIS Controls
    L.01.13
    Exercise: Filtering Controls by Attribute for a Case
    L.01.14

    MODULE_ID: PECB-27002LM-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Organizational and People Controls

    Selection and Design of Controls From Risk Treatment
    L.02.1
    Information Security Policies and Topic-Specific Policies (5.1)
    L.02.2
    Roles, Responsibilities, Segregation of Duties, and Management Duties (5.2 to 5.4)
    L.02.3
    Contact With Authorities and Special Interest Groups (5.5, 5.6)
    L.02.4
    Threat Intelligence (5.7) and Security in Project Management (5.8)
    L.02.5
    Procedures and Documented Information for Controls
    L.02.6
    Exercise: Drafting a Topic-Specific Policy
    L.02.7
    Asset Inventory, Acceptable Use, Return, and Classification (5.9 to 5.13)
    L.02.8
    Access Control, Identity Management, and Authentication Information (5.15 to 5.18)
    L.02.9
    Supplier Relationships, Agreements, and ICT Supply Chain (5.19 to 5.22)
    L.02.10
    Information Security for Use of Cloud Services (5.23)
    L.02.11
    Screening, Terms of Employment, and Awareness Training (6.1 to 6.3)
    L.02.12
    Disciplinary Process, Termination, Confidentiality, and Remote Working (6.4 to 6.7)
    L.02.13
    Information Security Event Reporting (6.8)
    L.02.14
    Exercise: Designing an Access Control Policy for a Case
    L.02.15

    MODULE_ID: PECB-27002LM-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Physical and Technological Controls

    Physical Perimeters, Entry Controls, and Securing Offices (7.1 to 7.3)
    L.03.1
    Physical Monitoring, Environmental Threats, and Secure Areas (7.4 to 7.6)
    L.03.2
    Clear Desk, Equipment Siting, Off-Premises Assets, Storage Media (7.7 to 7.10)
    L.03.3
    Supporting Utilities, Cabling, Maintenance, and Secure Disposal (7.11 to 7.14)
    L.03.4
    User Endpoint Devices and Privileged Access Rights (8.1, 8.2)
    L.03.5
    Information Access Restriction and Secure Authentication (8.3 to 8.5)
    L.03.6
    Capacity Management and Protection Against Malware (8.6, 8.7)
    L.03.7
    Vulnerability Management and Configuration Management (8.8, 8.9)
    L.03.8
    Information Deletion, Data Masking, and Data Leakage Prevention (8.10 to 8.12)
    L.03.9
    Backup, Redundancy, and Logging (8.13 to 8.15)
    L.03.10
    Network Security, Segregation, and Web Filtering (8.20 to 8.23)
    L.03.11
    Cryptography and Key Management (8.24)
    L.03.12
    Secure Development Lifecycle, Secure Coding, and Testing (8.25 to 8.29)
    L.03.13
    Outsourced Development, Environment Separation, and Change Management (8.30 to 8.32)
    L.03.14
    Exercise: Selecting Technological Controls for a Case Architecture
    L.03.15

    MODULE_ID: PECB-27002LM-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Incident Management, Testing and Monitoring of Controls

    Incident Management Planning and Preparation (5.24)
    L.04.1
    Assessment, Response, and Learning From Incidents (5.25 to 5.27)
    L.04.2
    Collection of Evidence and Forensic Readiness (5.28)
    L.04.3
    Security During Disruption and ICT Readiness for Business Continuity (5.29, 5.30)
    L.04.4
    Legal, Regulatory, Intellectual Property, and Records Protection (5.31 to 5.33)
    L.04.5
    Privacy and PII Protection and Independent Review (5.34, 5.35)
    L.04.6
    Exercise: Building an Incident Response Procedure
    L.04.7
    Information Security Testing: Vulnerability Scans and Penetration Tests
    L.04.8
    Monitoring Activities, Clock Synchronization, and Test Information (8.16, 8.17, 8.33)
    L.04.9
    Measuring Control Effectiveness With ISO/IEC 27004 Metrics
    L.04.10
    Compliance With Policies and Standards (5.36) and Operating Procedures (5.37)
    L.04.11
    Continual Improvement of Controls and Management Review Input
    L.04.12
    PECB Exam Format: Five Competency Domains, Open Book
    L.04.13
    Full-Length Practice Exam and Review
    L.04.14
    Exam: ISO-27002-LM
    L.04.15

    MODULE_ID: POST

    Live Training QS: ~7
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 4
    FREQUENTLY ASKED QUESTIONS

    ISO/IEC 27002 Lead Manager
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    ISO/IEC 27002 is the companion standard to ISO/IEC 27001: 27001 requires controls, 27002 explains each of the 93 controls and how to implement it. The PECB Certified ISO/IEC 27002 Lead Manager credential shows you can select, implement and measure information security controls to treat the risks an organization has identified.

    Security managers and consultants who choose and run the controls inside an ISO/IEC 27001 program, people responsible for information security, compliance, risk or governance, and members of an ISMS implementation team.

    PECB asks for a fundamental understanding of ISO/IEC 27002 and a working knowledge of information security controls. ISO/IEC 27001 Lead Implementer is not required, though many attendees hold it.

    Day 1 covers the ISO/IEC 27002:2022 structure: 93 controls in four themes, the 11 new controls, and control attributes. Day 2 works through organizational and people controls: roles, policies, assets, access, suppliers, awareness. Day 3 covers physical and technological controls: secure areas, endpoints, networks, vulnerabilities, development. Day 4 covers incident management and how to test and monitor controls once they are in place. The four days follow PECB’s official course structure, with the exam at the end.

    The exam covers 5 competency domains: fundamental principles of information security, cybersecurity and privacy; the ISMS and initiating ISO/IEC 27002 controls implementation; organizational and people controls; physical and technological controls; performance measurement, testing and monitoring of controls. Questions are weighted across the domains, and the course is organized so every domain is taught before you sit the exam.

    The exam has 80 multiple-choice questions, a mix of standalone and scenario-based, and lasts 3 hours. It is open-book, and the passing score is 70%. Online exams are graded instantly.

    Yes. Both the PECB certification exam and the certification fee are included in your course fee, and the exam is scheduled at the end of the course. There is nothing extra to buy to get certified.

    Yes. We include one free exam retake within 12 months of your first attempt, and it is covered by your course fee.

    ISO/IEC 27001 is the certifiable management system standard; its Annex A lists 93 controls. ISO/IEC 27002 is the detailed guidance for those same controls. Organizations certify to 27001 and use 27002 to do the implementation work, which is why 27002:2022 and 27001:2022 were revised together.

    Lead Implementer builds and operates the whole management system. Lead Manager goes deep on one part of it: choosing, implementing and measuring the security controls. If you already have an ISMS and the controls are where it is weak, this is the course. Compare all of our PECB courses side by side on the PECB training courses page.

    As of 2026 the current edition is ISO/IEC 27002:2022, which cut the control set from 114 to 93, grouped them into organizational, people, physical and technological themes, and added 11 new controls such as threat intelligence, cloud services security and data leakage prevention. This course teaches the 2022 edition.

    Yes. PECB issues an attestation of course completion worth 31 CPD (Continuing Professional Development) credits to everyone who attends the course.

    Yes. PECB is accredited to ISO/IEC 17024, the international standard for bodies certifying people, and its credentials are recognized internationally. Training Camp delivers the official PECB courseware as an authorized training partner.

    Get the Free
    PECB-27002LM Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    ISO/IEC 27002 Lead Manager
    Articles & Resources

    The controls behind ISO 27001 Annex A, how the ISO 27001 credentials split, and where control-level skills fit a GRC career.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Continue Your Journey

    ISO 27002 LM Related Courses

    Advance your career with these recommended certifications

    Featured on