Overview
The ISO/IEC 27035 Lead Incident Manager training course equips participants with the knowledge and skills necessary to support organizations in establishing and implementing a process for managing information security incidents.
This training course is based on the ISO/IEC 27035 series and other good practices of incident management and covers the entire incident lifecycle, from incident planning to post-incident activities. In addition, participants will also learn about the role of key stakeholders and the importance of working with other organizations to handle information security incidents.
Skills Covered
- Explain the fundamental principles of incident management
- Develop and implement effective incident response plans tailored to the organization’s needs and select an incident response team
- Conduct thorough risk assessments to identify potential threats and vulnerabilities within an organization
- Apply good practices from various international standards to enhance the efficiency and effectiveness of incident response efforts
- Conduct post-incident analysis and identify lessons learned
Who Should Attend
This training course is intended for:
- Managers or consultants seeking to expand their knowledge of information security incident management
- Professionals seeking to establish and manage effective incident response teams (IRTs)
- IT professionals and information security risk managers seeking to enhance their knowledge in information security incident management
- Members of incident response teams
- Incident response coordinators or other roles with responsibilities for incident handling and response
Course Curriculum
Course Modules
Exam & Certification
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam meets the PECB Examination and Certification Program (ECP) requirements. It covers the following competency domains:
- Domain 1: Fundamental principles and concepts of information security incident management
- Domain 2: Information security incident management process based on ISO/IEC 27035
- Domain 3: Designing and developing an organizational incident management process based on ISO/IEC 27035
- Domain 4: Preparing and executing the incident response plan for information security incidents
- Domain 5: Implementing incident management processes and managing information security incidents
- Domain 6: Improving the incident management processes and activities
