PECB CISO Training Course

The PECB Certified DORA Lead Manager training course equips you with the necessary skills to lead and oversee the implementation of digital operational resilience strategies within financial entities to help them ensure compliance with European Union’s Digital Operational Resilience Act (DORA)

This instructor-led, live training in Uzbekistan (online or onsite) is aimed at beginner-level quality assurance professionals, regulatory compliance staff, medical device engineers, and any professionals involved in medical device manufacturing who wish to gain a foundational understanding of ISO 13485 to implement and maintain a compliant quality management system and ensure regulatory compliance in their organizations.

By the end of this training, participants will be able to:

• Understand the structure, purpose, and requirements of ISO 13485:2016.
• Learn about the quality management principles specific to medical devices.
• Gain insights into key processes and documentation required for compliance.
• Understand the steps to implement and maintain an ISO 13485 quality management system (QMS).

This training course is designed to help participants understand the fundamental concepts and principles of a business continuity management system (BCMS) based on ISO 22301. By attending this training course, participants will learn more about the structure and requirements of the standard including the BCMS policy, the top management’s commitment, internal audit, management review, and continual improvement process.

Why should you attend?

This training course is designed to help participants gain a deep understanding of the fundamental concepts and principles of a business continuity management system (BCMS) based on ISO 22301. By participating in this training, attendees will learn about the structure and requirements of the standard, including the BCMS policy, top management’s commitment, internal audit processes, management reviews, and the continual improvement process.

After completing the training course, you can take the exam. If you pass successfully, you can apply for the “PECB Certificate Holder in ISO 22301 Foundation” credential. This PECB Foundation certificate demonstrates your knowledge of the fundamental concepts, principles, methodologies, requirements, framework, and management approaches used in business continuity.

Who should attend?

• Individuals involved in business continuity
• Those looking to gain knowledge about the main processes of business continuity management systems (BCMS)
• People interested in pursuing a career in business continuity

Learning objectives

• Acknowledge the connection between ISO 22301 and other standards and regulatory frameworks
• Understand the components and operations of a BCMS based on ISO 22301, including its key processes
• Grasp the concepts, approaches, methods, and techniques used for implementing and managing a BCMS

Educational approach

• Lecture sessions feature discussion questions and real-life examples.
• The exercises consist of multiple-choice quizzes.
• Participants are encouraged to interact and engage in discussions and the completion of quizzes.
• The quizzes are designed to mirror the certificate exam format.

The ISO 22301 Introduction training course provides a comprehensive understanding of the fundamental concepts of a Business Continuity Management System (BCMS).

By participating in the ISO 22301 Introduction course, you will gain insights into the significance of a Business Continuity Management System and the advantages it offers to businesses, society, and governments.

Who should attend?

• Individuals interested in Business Continuity Management
• Those seeking to acquire knowledge about the core processes of a Business Continuity Management System (BCMS)

Learning objectives

• Gain an understanding of the concepts, approaches, methods, and techniques used to establish a Business Continuity Management System
• Familiarize yourself with the essential components of a Business Continuity Management System

In response to the growing prevalence of disruptions and the unpredictable nature of various types of disasters, including those of natural, occupational, or information security nature, organizations are actively pursuing ISO 22301 certification. As more organizations seek compliance with ISO 22301, there is a corresponding demand for skilled auditors who possess the necessary skills and knowledge to assess and verify their compliance.

After completing the training course, you will be eligible to take the exam. If you successfully pass the exam, you can apply for the “Certified ISO 22301 Lead Implementer” credential. This internationally recognized certificate will demonstrate your professional capabilities and practical knowledge in implementing a BCMS based on the requirements of ISO 22301 within an organization.

Who should attend?

• Project managers and consultants involved in business continuity management
• Expert advisors aiming to master the implementation of a business continuity management system
• Individuals responsible for maintaining compliance with BCMS requirements within an organization
• Members of the BCMS team

Learning objectives

• Gain a thorough understanding of the concepts, approaches, methods, and techniques used for implementing and effectively managing a BCMS
• Learn how to interpret and implement the requirements of ISO 22301 in the context of an organization
• Understand the operation of the business continuity management system and its processes based on ISO 22301
• Acquire the knowledge necessary to support an organization in effectively planning, implementing, managing, monitoring, and continuously improving a BCMS

Educational approach

• This training course is based on theoretical foundations, implementation best practices, and ISO 22301 requirements essential for the implementation of a BCMS.
• Lecture sessions are complemented with practical exercises based on a case study, which includes role-playing and discussions.
• Participants are encouraged to interact and engage in discussions and exercises.
• The exercises are designed to mimic the certification exam.

General Information

• Certification fees are included in the exam price. After completing the course, you will be able to schedule your exam.
• Participants will receive training materials containing over 450 pages of explanatory information and practical examples.
• An Attendance Record worth 31 CPD (Continuing Professional Development) credits will be issued to participants who have attended the training course.
• If candidates fail the exam, they can retake it within 12 months of the initial attempt at no additional cost.

Disasters have various impacts in organizations. Disasters can result from natural events, information security breaches, or various other incidents. They are often unpredictable and that highlights the significance of preparedness in setting your business apart and shaping its future. As such, proper planning is essential in reducing risks, minimizing consequences, and managing the negative impacts of disasters and incidents while ensuring the continuity of daily operations to meet customer needs without interruption.

Why should you attend?

The ISO/IEC 27001 Foundation training course provides a comprehensive understanding of the essential elements required to implement and manage an Information Security Management System as outlined in ISO/IEC 27001. Throughout this course, you will gain insights into various aspects of the ISMS, such as policy development, procedures, performance metrics, management commitment, internal audits, management reviews, and continuous improvement.

Upon completing this course, you will be eligible to take the exam and apply for the “PECB Certified ISO/IEC 27001 Foundation” certification. This credential demonstrates your proficiency in the fundamental methodologies, requirements, framework, and management approaches outlined in ISO/IEC 27001.

Who should attend?

• Professionals involved in Information Security Management
• Individuals aiming to gain knowledge about the core processes of Information Security Management Systems (ISMS)
• Those interested in pursuing a career in Information Security Management

Educational approach

• Lecture sessions are complemented with practical questions and examples to enhance understanding
• Practical exercises include real-world scenarios and group discussions to reinforce learning
• Practice tests mirror the format of the Certification Exam, helping you prepare effectively

ISO/IEC 27001 Lead Auditor

The ISO/IEC 27001 Lead Auditor training equips you with the essential expertise to conduct an Information Security Management System (ISMS) audit, using widely accepted audit principles, procedures, and techniques.

Why should you attend?

Throughout this training course, you will gain the knowledge and skills required to plan and execute both internal and external audits in accordance with ISO 19011 and the ISO/IEC 17021-1 certification process.

Through practical exercises, you will become proficient in audit techniques and be capable of managing an audit program, leading an audit team, communicating with clients, and resolving conflicts.

Once you have acquired the necessary expertise to perform these audits, you can take the exam and apply for a “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Holding a PECB Lead Auditor Certificate will demonstrate your ability and competence to audit organizations based on best practices.

Who should attend?

• Auditors aiming to conduct and lead Information Security Management System (ISMS) certification audits
• Managers or consultants looking to master the ISMS audit process
• Individuals responsible for ensuring compliance with Information Security Management System requirements
• Technical experts preparing for an ISMS audit
• Expert advisors in Information Security Management

Learning objectives

• Understand the functioning of an Information Security Management System based on ISO/IEC 27001
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand an auditor’s role in planning, leading, and following up on a management system audit according to ISO 19011
• Learn how to lead an audit and manage an audit team
• Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquire the competencies of an auditor to plan, lead, draft reports, and follow up on audits in compliance with ISO 19011

Educational approach

• This training combines theoretical knowledge with best practices used in ISMS audits
• Lecture sessions are complemented with examples based on case studies
• Practical exercises include role-playing and discussions based on a case study
• Practice tests mimic the Certification Exam

The ISO/IEC 27002 Lead Manager training equips you with the essential expertise and knowledge needed to support an organization in implementing and managing Information Security controls as outlined in ISO/IEC 27002.

Upon completing this course, you will be eligible to take the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” certification. This PECB Lead Manager Certification demonstrates that you have a thorough understanding of the principles and techniques required for implementing and managing Information Security Controls based on ISO/IEC 27002.

Who should attend?

• Managers or consultants aiming to implement an Information Security Management System (ISMS) in line with ISO/IEC 27001 and ISO/IEC 27002
• Project managers or consultants looking to master the process of implementing an Information Security Management System
• Individuals responsible for information security, compliance, risk management, and governance within an organization
• Members of information security teams
• Expert advisors in information technology
• Information Security officers
• Privacy officers
• IT professionals
• Chief Technology Officers (CTOs), Chief Information Officers (CIOs), and Chief Information Security Officers (CISOs)

Learning objectives

• Acquire the skills to implement Information Security controls in accordance with the framework and principles of ISO/IEC 27002
• Gain a thorough understanding of the concepts, approaches, standards, methods, and techniques necessary for effectively implementing and managing Information Security controls
• Understand the interrelationships among the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
• Recognize the significance of information security in the strategic planning of an organization
• Become proficient in implementing information security management processes
• Master the formulation and implementation of security requirements and objectives

Educational approach

• This training combines theoretical knowledge with practical application
• Lectures are complemented by real-world examples to illustrate key concepts
• Practical exercises based on case studies are included
• Review exercises are provided to assist with exam preparation
• A practice test similar to the certification exam is also part of the training

General Information

• The cost of certification is included in the exam fee
• Participants will receive a comprehensive training manual containing over 500 pages of information and practical examples
• A participation certificate with 31 CPD (Continuing Professional Development) credits will be issued to participants
• If you do not pass the exam, you can retake it within 12 months at no additional cost

The ISO/IEC 27005 Lead Risk Manager training equips you with the essential expertise to support an organization in managing risks associated with all relevant information security assets. This training uses the ISO/IEC 27005 standard as a reference framework. Throughout the course, you will gain comprehensive knowledge of a process model for designing and developing an Information Security Risk Management program. The training also provides a deep understanding of best practices in risk assessment methods such as OCTAVE, EBIOS, MEHARI, and harmonized TRA. This course supports the implementation of the ISMS framework outlined in the ISO/IEC 27001 standard.

After mastering the necessary concepts of Information Security Risk Management based on ISO/IEC 27005, you will be eligible to take the exam and apply for the “PECB Certified ISO/IEC 27005 Lead Risk Manager” credential. Holding a PECB Lead Risk Manager Certificate demonstrates your practical knowledge and professional capabilities to support and lead a team in managing Information Security Risks.

Who should attend?

• Information Security risk managers
• Members of the Information Security team
• Individuals responsible for Information Security, compliance, and risk within an organization
• Those implementing ISO/IEC 27001 or seeking to comply with it, as well as individuals involved in a risk management program
• IT consultants
• IT professionals
• Information Security officers
• Privacy officers

Examination - Duration: 3 hours

The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:

• Domain 1: Fundamental principles and concepts of Information Security Risk Management
• Domain 2: Implementation of an Information Security Risk Management program
• Domain 3: Information security risk assessment
• Domain 4: Information security risk treatment
• Domain 5: Information security risk communication, monitoring, and improvement
• Domain 6: Information security risk assessment methodologies

General Information

• Certification fees are included in the exam price
• Training material containing over 350 pages of information and practical examples will be provided
• A participation certificate with 21 CPD (Continuing Professional Development) credits will be issued
• If you fail the exam, you can retake it within 12 months at no additional cost

This training course teaches how risk assessment for information security is done by combining the information on ISO/IEC 27005:2022 and ISO/IEC 27001. In addition to theoretical knowledge, this training course is equipped with practical exercises, quizzes, case studies, all of which make it a very engaging training course.

Information security threats and attacks are constantly evolving. The best defense against these threats is the effective implementation and management of information security controls and best practices. Ensuring robust information security is also a key expectation from customers, legislators, and other stakeholders.

This training course is designed to equip participants with the skills needed to implement an Information Security Management System (ISMS) based on ISO/IEC 27001. It aims to provide a thorough understanding of ISMS best practices and a framework for its continuous management and improvement.

After completing the training, you will be eligible to take the exam. If you pass, you can apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which confirms your ability and practical knowledge in implementing an ISMS according to the requirements of ISO/IEC 27001.

Who Can Attend?

• Project managers and consultants involved in or concerned with the implementation of an ISMS
• Expert advisors looking to master the implementation of an ISMS
• Individuals responsible for ensuring compliance with information security requirements within an organization
• Members of an ISMS implementation team

General Information

• Certification fees are included in the exam price.
• Training materials containing over 450 pages of information and practical examples will be provided.
• A participation certificate with 31 CPD (Continuing Professional Development) credits will be issued.
• If you fail the exam, you can retake it within 12 months at no additional cost.

Educational Approach

• The training course includes essay-type exercises, multiple-choice quizzes, examples, and best practices for implementing an ISMS.
• Participants are encouraged to communicate with each other and engage in discussions while completing quizzes and exercises.
• Exercises are based on a case study.
• The structure of the quizzes mirrors that of the certification exam.

Learning Objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for implementing and effectively managing an ISMS.
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks.
• Understand how an information security management system operates and its processes based on ISO/IEC 27001.
• Learn to interpret and implement the requirements of ISO/IEC 27001 in the context of a specific organization.
• Acquire the knowledge needed to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS.

ISO 28000 Lead Implementer training equips you with the essential expertise to assist an organization in establishing, implementing, managing, and maintaining a Supply Chain Security Management System (SCSMS) based on ISO 28000. Throughout this training course, you will gain a deep understanding of the best practices for Supply Chain Security Management Systems and learn how to enhance efficiency in managing potential security risks and their impacts within an organization's supply chain.

After mastering all the necessary concepts of Supply Chain Security Management Systems, you can take the exam and apply for the “PECB Certified ISO 28000 Lead Implementer” credential. By holding a PECB Lead Implementer Certificate, you will demonstrate that you have the practical knowledge and professional capabilities to implement ISO 28000 within an organization.

Who should attend?

• Managers or consultants involved in Supply Chain Security Management
• Expert advisors aiming to master the implementation of a Supply Chain Security Management System
• Individuals responsible for maintaining compliance with SCSMS requirements
• SCSMS team members

Learning objectives

• Understand the relationship between ISO 28000 and other standards and regulatory frameworks
• Master the concepts, approaches, methods, and techniques used for implementing and effectively managing a SCSMS
• Learn how to interpret the ISO 28000 requirements in the specific context of an organization
• Learn how to support an organization in effectively planning, implementing, managing, monitoring, and maintaining a SCSMS
• Acquire the expertise to advise an organization on implementing best practices for Supply Chain Security Management Systems

Educational approach

• This training combines theoretical knowledge with practical best practices used in the implementation of a SCSMS
• Lecture sessions are enriched with examples based on case studies
• Practical exercises include role-playing and discussions based on a case study
• Practice tests are designed to mirror the Certification Exam

General Information

• Certification fees are included in the exam price
• A comprehensive training material with over 450 pages of information and practical examples will be provided
• A participation certificate worth 31 CPD (Continuing Professional Development) credits will be issued
• In the event of exam failure, you can retake the exam within 12 months at no additional cost