EasyELEarning Academy · PECB Authorized Partner
ISO/IEC 27002 Lead Manager – Information Security
Develop a systematic approach to coordinating an information security control programme and evaluating whether controls remain appropriate and effective.
Duration
5 daysDelivery
Live online or in personCredential
PECB examination & certificationContent and learning objectives
- Control programme planning
- Risk-based control selection
- Implementation and coordination
- Performance review and improvement
Who should attend?
Professionals working in information & cybersecurity, with responsibilities appropriate to the selected course level.
Prerequisites
A fundamental understanding of ISO/IEC 27002 and comprehensive knowledge of information security controls are required.
Course structure and delivery
The full course follows the 5-day PECB agenda. Learn live with a qualified trainer through exercises, discussion and practical cases. Online and classroom delivery cover the same content. Examination scheduling is agreed in line with the course agenda.
Online sessions are delivered live using alfaview. The Odoo portal provides course information and materials. Dates, teaching language and classroom location are agreed before the course starts.
Materials, examination and certification
The full course includes official PECB training materials, tuition in the selected format and the first PECB examination attempt.
The course prepares you for the PECB examination for ISO/IEC 27002 Lead Manager. After passing the exam, you can apply for the corresponding PECB credential. PECB assesses eligibility and awards the credential. Depending on the credential level, additional evidence of professional and relevant practical experience is required. Attendance or a passed exam alone does not guarantee the full credential.
Option: 4 hours of exam preparation
An optional four-hour live exam preparation session is available for €650. It is intended for participants who are already studying independently and does not replace the complete PECB course. Materials and examination arrangements for this option are agreed separately in advance.
Teaching and examination language
Teaching languages: German, English or Hungarian. The selected teaching language is confirmed when scheduling the course. Hungarian is a teaching language for this PECB course only and is not a promised examination language. The examination language and the language of official PECB materials are agreed separately before booking.
Self-employed? Explore KOMPASS before booking.
KOMPASS may support suitable professional development for eligible solo self-employed people in Germany. Arrange a consultation with us to discuss course selection. Mandatory funding advice and eligibility checks are provided by an official KOMPASS advisory centre. Only make a binding booking after the qualification voucher has been issued. Training must include at least 20 hours; not every offer meets this condition. Funding eligibility is assessed individually.
PECB course profile and credential requirements
Frequently asked questions about this course
What responsibilities does Lead Manager address?
This level is especially relevant when you coordinate security controls across several teams or advise others. Decisions, dependencies and effectiveness matter alongside implementation. If you mainly need an introduction to terminology and fundamentals, discuss your previous experience with us to choose an appropriate starting point.
Can ISO/IEC 27002 be combined with NIST or other frameworks?
Yes, mapping can help reuse work already completed. Similar wording does not mean two requirements are identical. Check each mapping’s objective, scope and expected evidence. A shared control register can be useful, provided differences remain visible rather than disappearing behind a single compliance tick.
How can I tell whether a control actually works?
First define the unwanted situation the control should prevent or detect. Then select an appropriate test or evidence. Completing an administrative task is not itself proof of effectiveness. For example, examine whether access reviews detect inappropriate permissions, not merely whether the review process was recorded as complete.
Which measures are useful for management?
Choose measures that support a decision. A leader may need to know which important services are exposed by overdue actions and who must respond. Raw counts without risk context can show activity but rarely explain whether the organisation’s security position is actually improving.
How should I handle competing IT and business priorities?
Make the security objective and operational consequences visible to both sides. Compare workable alternatives instead of defending a single preferred rule. Record the decision, ownership and accepted limitations. This turns an abstract security disagreement into a traceable discussion about a specific business process and its needs.
How can I keep the control register useful beyond audit preparation?
Connect controls with the processes where they actually operate. Owners should know when to review them, what results to record and how to report deviations. Regular, brief operational feedback usually reveals more than a hurried collection of documents immediately before an auditor arrives.
Can I take the Lead course without enough professional experience?
Course prerequisites and the eventual certification level need separate consideration. The course requires a sound knowledge base, while the Lead credential additionally requires relevant experience. Discuss your background before booking. Passing an examination does not replace the experience evidence required by PECB.
What kind of project is useful for applying the learning?
Choose a project involving several functions, such as redesigning privileged access or introducing a service provider. Outline its objective, participants and unresolved decisions without disclosing confidential information. This creates a focused basis for questions about control selection, ownership, implementation dependencies and effectiveness checks.
Selected courses compared
Which content fits your goals, which skills are practised, and what does the credential demonstrate? This selection compares our course with two specific alternatives.
On smaller screens, scroll the table sideways to see all columns.
| Course offer | Content | Skills development | What the credential demonstrates |
|---|---|---|---|
| EasyELEarning Academy This course offer | The programme connects ISO/IEC 27002 safeguards with cross-functional planning, priorities, resources and ongoing evaluation; exercises and cases support preparation for the PECB examination. | The learning objective is to structure a safeguards programme, coordinate implementation across departments and evaluate improvements systematically within the wider information security context. | The personal PECB credential requires a passed examination and the conditions of the requested certification level; regular manager designations also require experience evidence. |
| RRSG ISO/IEC 27002 Lead Manager Online-Kurs The same PECB programme delivered by another training provider. Provider’s courseAdditional source | The PECB programme covers managing and evaluating safeguards, including supplier relationships, development processes, test environments and monitoring controls within an information security management system. | The learning objective is to support a safeguards programme, evaluate controls and manage improvements with reference to risks and the organisation’s requirements. | The offer leads to the PECB examination; the subsequent certification level depends on evidenced professional and project experience, not on course attendance alone. |
| BCIT Formation PECB Certified ISO/IEC 27002 Lead Manager The same PECB programme delivered by another training provider. Provider’s courseAdditional source | BCIT combines interpretation of ISO/IEC 27002 with risk assessment and suitable safeguards, using cases, exercises and role play to explore organisational situations. | The learning objective is to align safeguards with risks and business requirements, plan implementation and support a structured approach to information security. | The course includes a PECB final examination. The regular Lead Manager designation additionally requires PECB experience criteria; completion does not replace that certification decision. |
Checked: 31 October 2026. Based on the linked provider information. This selection is not a complete market overview. Related courses are identified; scope, entry requirements, teaching languages and examination languages may differ. The table describes learning objectives and credential types, without guaranteeing learning outcomes or general equivalence. Current offer and certification conditions apply. Official course names retain their original wording.