ISO/IEC 27002:2022 Organizational Controls Lead Implementer certification exam

Exam code

ITC-084

Launch date

April 15, 2023

Exam description

The ISO/IEC 27002:2022 Organizational Controls Lead Implementer certification exam tests the candidate's advanced knowledge of the Organizational Controls outlined in the ISO/IEC 27002:2022.

Current version

v1 (April 15, 2023)

Exam format

Multiple choice; computer-based; closed book (online proctored exam)

Number of questions

40 questions

Passing score

70% (28 out of 40)

Exam duration

60 minutes

Level

Advanced

Languages

English and Portuguese

Exam description

The exam covers all Organizational Controls outlined in the ISO/IEC 27002:2022 (Policies for information security, Information security roles and responsibilities, Segregation of duties, Management responsibilities, Contact with authorities, Contact with special interest groups, Threat intelligence, Information security in project management, Inventory of information and other associated assets, Acceptable use of information and other associated assets, Return of assets, Classification of information, Labelling of information, Information transfer, Access control, Identity management, Authentication information, Access rights, Information security in supplier relationships, Addressing information security within supplier agreements, Managing information security in the ICT supply chain, Monitoring, review and change management of supplier services, Information security for use of cloud services, Information security incident management planning and preparation, Assessment and decision on information security events, Response to information security incidents, Learning from information security incidents, Collection of evidence, Information security during disruption, ICT readiness for business continuity, Legal, statutory, regulatory and contractual requirements, Intellectual property rights, Protection of records, Privacy and protection of PII, Independent review of information security, Compliance with policies, rules and standards for information security, and Documented operating procedures).

RECOMMENDED HOURS OF STUDY

32 hours

BLOOM'S TAXONOMY

Level 2 (Understanding), Level 3 (Applying), Level 4 (Analyzing), and Level 5 (Evaluating)

Recommended reading

• ISO/IEC 27002:2022 - Information security, cybersecurity and privacy protection - Information security controls - https://www.iso.org/standard/75652.html

Prerequisites

There are no prerequisites for this certification

Recommended experience

Six months of work experience in Information Security

Validity period

Lifetime