Information Security
ISO/IEC 27400 — IoT Security and Privacy
Levels available
Course types, duration & fees
| Course type | Who should attend | What your company benefits | Duration | Fee |
|---|---|---|---|---|
| Foundation | Those who wish to learn the basis of implementing the management system and its processes | Provide the organization with best-practice based orientation and mindset culture by understanding the main important elements of ISO standards | 2 days | HKD 4,400 |
| Lead Manager | Managers in the relevant field who wish to master the guidelines specified by best practices | Lead your organization to follow the guidelines specified by ISO standards that can help you increase the skills of your staff and improve efficiency | 3 days | HKD 9,600 |
About the standard
ISO/IEC 27400 provides comprehensive guidelines for managing the security and privacy risks associated with Internet of Things (IoT) systems. It outlines key principles, risk sources, and controls to help organizations secure IoT solutions across their full lifecycle — from design and development through deployment, operation, and decommissioning — and addresses the challenges unique to IoT ecosystems, such as their distributed nature, diverse stakeholders, and large attack surfaces.
Levels available
- Foundation — Introduces the core principles and risk landscape of IoT security and privacy under ISO/IEC 27400.
- Lead Manager — For those responsible for leading IoT security and privacy efforts, building the skills to implement, maintain, and manage effective controls across the IoT system lifecycle.
Who should attend
This course track suits IoT engineers, security architects, and product managers responsible for securing connected devices and services. It's also relevant to privacy and compliance professionals who need to assess IoT security risk and controls.
Learning objectives
- Understand the key characteristics and components of IoT devices and systems
- Gain practical insight into the security and privacy controls outlined in ISO/IEC 27400
- Develop the expertise to support, maintain, and implement effective IoT security measures
- Learn to assess and manage security risks associated with IoT systems throughout their lifecycle
- Understand how to identify vulnerabilities and implement appropriate mitigation strategies
Why attend
IoT systems face significant security challenges due to their distributed, multi-stakeholder nature, and as adoption grows, so do cybersecurity threats and regulatory expectations. This training builds the technical competence to secure complex IoT ecosystems, helps organizations mitigate risk and strengthen governance, and gives professionals an internationally recognized credential in one of the fastest-growing areas of information security.
PECB link
https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27400