ISO 27002 (2013) is an international standard that defines guidelines for implementing the controls listed in ISO 27001.  Whereas ISO 27001 specifies 114 controls that can be used to reduce security risks. Organizations can obtain ISO 27001 certification but not ISO 27002.