EasyELEarning Academy · PECB Authorized Partner
ISO/IEC 27002 Foundation – Information Security
Understand the purpose and structure of information security controls and their relationship to organisational risks and responsibilities.
Duration
2 daysDelivery
Live online or in personCredential
PECB examination & certificationContent and learning objectives
- ISO/IEC 27002 structure
- Organisational and people controls
- Physical and technological controls
- Selection and application of controls
Who should attend?
Professionals working in information & cybersecurity, with responsibilities appropriate to the selected course level.
Prerequisites
No formal course prerequisites specified by PECB.
Course structure and delivery
The full course follows the 2-day PECB agenda. Learn live with a qualified trainer through exercises, discussion and practical cases. Online and classroom delivery cover the same content. Examination scheduling is agreed in line with the course agenda.
Online sessions are delivered live using alfaview. The Odoo portal provides course information and materials. Dates, teaching language and classroom location are agreed before the course starts.
Materials, examination and certification
The full course includes official PECB training materials, tuition in the selected format and the first PECB examination attempt.
The course prepares you for the PECB examination for ISO/IEC 27002 Foundation. After passing the exam, you can apply for the corresponding PECB credential. PECB assesses eligibility and awards the credential. This credential does not require professional or project experience. PECB examination and certificate rules apply.
Option: 4 hours of exam preparation
An optional four-hour live exam preparation session is available for €650. It is intended for participants who are already studying independently and does not replace the complete PECB course. Materials and examination arrangements for this option are agreed separately in advance.
Teaching and examination language
Teaching languages: German, English or Hungarian. The selected teaching language is confirmed when scheduling the course. Hungarian is a teaching language for this PECB course only and is not a promised examination language. The examination language and the language of official PECB materials are agreed separately before booking.
Self-employed? Explore KOMPASS before booking.
KOMPASS may support suitable professional development for eligible solo self-employed people in Germany. Arrange a consultation with us to discuss course selection. Mandatory funding advice and eligibility checks are provided by an official KOMPASS advisory centre. Only make a binding booking after the qualification voucher has been issued. Training must include at least 20 hours; not every offer meets this condition. Funding eligibility is assessed individually.
PECB course profile and credential requirements
Frequently asked questions about this course
How does ISO/IEC 27002 differ from ISO/IEC 27001?
ISO/IEC 27001 sets requirements for an information security management system. ISO/IEC 27002 explains security controls. For a beginner, the practical value is understanding why individual safeguards exist and how they work together, including discussions about access rights, suppliers and security incidents.
Is Foundation useful if I do not work in IT?
Yes, particularly when your work in HR, purchasing, privacy or operations involves security requirements. Many difficulties arise between departments rather than inside a technical tool. Bring a familiar workflow: who receives information, who may change it, and what happens when something goes wrong?
Does the course only cover technical safeguards?
No. Information security also involves responsibilities, employee-related processes and physical access. Consider someone leaving an organisation: accounts, keys, documents and ownership all need attention. Foundation provides a shared vocabulary for discussing these connected issues instead of treating security as a collection of technical settings.
Must every organisation implement every control in the same way?
A list of controls is not a ready-made security solution. Useful implementation reflects an organisation’s information, working methods and risks. A small consultancy will often need different arrangements from a data centre. The important skill is explaining why a safeguard and its implementation fit the situation.
Does the Foundation credential also certify my company?
No. The personal credential relates to your demonstrated knowledge. It does not replace an assessment of your company’s information security management system. When discussing the course internally, distinguish your own professional development from a separate organisational certification project with its own scope and evidence.
Will Foundation help me question everyday security requirements more effectively?
Yes. A useful outcome is being able to ask about a requirement’s purpose, owner and evidence. Instead of simply asking whether a policy exists, consider whether the people affected know it and whether the described process actually works in their normal working environment.
When does a Manager course make sense after Foundation?
An application-focused course becomes useful when you are expected to select, introduce or coordinate controls in operation. Foundation primarily helps you understand the subject. Choose the next level around your intended responsibilities rather than trying to accumulate the largest possible collection of certificates.
How should I prepare for the Foundation course?
Write down three practical questions from your work, such as access rights, confidential documents or service providers. There is no need to bring confidential records. Describe the process anonymously and consider which information needs protection and which people or departments depend on it.
Selected courses compared
Which content fits your goals, which skills are practised, and what does the credential demonstrate? This selection compares our course with two specific alternatives.
On smaller screens, scroll the table sideways to see all columns.
| Course offer | Content | Skills development | What the credential demonstrates |
|---|---|---|---|
| EasyELEarning Academy This course offer | Information security fundamentals, the structure of ISO/IEC 27002 and organisational and technical safeguards are connected with risks, protection objectives and business responsibilities. | The learning objective is to classify safeguards, explain their purpose and support collaboration within an ISMS, providing a foundation for information security responsibilities. | Passing the PECB examination enables an application for the personal Foundation credential. PECB requires no professional or project experience and checks the award conditions. |
| Schönbrunn TASC PECB ISO/IEC 27002 Foundation The same PECB programme delivered by another training provider. Provider’s courseAdditional source | The course explains ISO/IEC 27002 organisational, people, physical and technological controls and their connection with information security management within an organisation. | The learning objective is to understand key controls and their application; practical examples, exercises and discussions support an introduction to the subject. | After passing the examination, candidates can apply for the PECB Foundation credential. Professional and project experience are not required; personal award conditions apply. |
| TSTC ISO 27002 Foundation (PECB) The same PECB programme delivered by another training provider. Provider’s courseAdditional source | TSTC covers fundamental concepts and ISO/IEC 27002 safeguards alongside connections with other ISO 27000 family standards supporting structured information security management. | The learning objective is to explain safeguards and their role within an ISMS, establishing a subject foundation for further information security responsibilities. | The offer prepares candidates for a PECB Foundation examination. The personal credential demonstrates assessed foundational knowledge rather than certification of an organisation’s management system. |
Checked: 31 October 2026. Based on the linked provider information. This selection is not a complete market overview. Related courses are identified; scope, entry requirements, teaching languages and examination languages may differ. The table describes learning objectives and credential types, without guaranteeing learning outcomes or general equivalence. Current offer and certification conditions apply. Official course names retain their original wording.