Information Security Controls (ISO/IEC 27002) FoundationOverview The ISO IEC 27002 provides a reference set of generic information security controls including implementation guidance. The Information Security Controls (ISO IEC 27002) Foundation is a certification intended for individuals seeking to validate their foundational knowledge of the ISO IEC 27002. Exam Content The exam covers topics such as Terms and definitions, Normative references, Organizational controls, People controls, Physical controls,