ISO/IEC 27002:2022 Information Security Controls

It is for information security and management system practitioners: people who implement, operate, own or review information security controls, such as ISMS leads, IT and security managers, control owners and implementation team members. Learners new to the subject may start with Sterling Academy's ISO/IEC 27001:2022 Awareness course, which leads naturally into this one.

The course explains the 93 controls in ISO/IEC 27001:2022 Annex A using the implementation guidance in ISO/IEC 27002:2022. Learners explore the purpose of each control, navigate the organisational, people, physical and technological themes, and connect the control guidance to implementation and audit considerations, so they understand security controls in the context of real implementation.

ISO/IEC 27002:2022 Information Security Controls is a set of short video modules followed by practice questions and a final exam. The course page shows the current number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO/IEC 27002:2022 Information Security Controls. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. The certificate states that the course covers 93 controls and lists the four control themes.

Yes. ISO/IEC 27002:2022 Information Security Controls is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

ISO/IEC 27002:2022 Information Security Controls has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators track their team's progress. Prices exclude taxes, and Sterling confirms final pricing.

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO/IEC 27002:2022 Information Security Controls and reached the pass mark in its final exam. It is not certification of an organisation to ISO/IEC 27001, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

ISO/IEC 27002:2022 gives guidance on the 93 information security controls listed in ISO/IEC 27001:2022 Annex A. The controls are grouped into four themes: organisational, people, physical and technological. This course works through those themes so learners understand the purpose of the controls and how the guidance applies in implementation and audit.