Overview
Master the implementation and management of information security incident management processes based on ISO/IEC 27035.
The ISO/IEC 27035 Lead Incident Manager training course equips participants with the knowledge and skills necessary to support organizations in establishing and implementing a process for managing information security incidents.
This training course is based on the ISO/IEC 27035 series and other good practices of incident management and covers the entire incident lifecycle, from incident planning to post-incident activities.
In addition, participants will also learn about the role of key stakeholders and the importance of working with other organizations to handle information security incidents.
Skills Covered
By the end of this training course, you will be able to:
- Explain the fundamental principles of incident management
- Develop and implement effective incident response plans tailored to the organization’s needs and select an incident response team
- Conduct thorough risk assessments to identify potential threats and vulnerabilities within an organization
- Apply good practices from various international standards to enhance the efficiency and effectiveness of incident response efforts
- Conduct post-incident analysis and identify lessons learned
Who Should Attend
This training course is intended for:
- Managers or consultants seeking to expand their knowledge of information security incident management
- Professionals seeking to establish and manage effective incident response teams (IRTs)
- IT professionals and information security risk managers seeking to enhance their knowledge in information security incident management
- Members of incident response teams
- Incident response coordinators or other roles with responsibilities for incident handling and response
Course Curriculum
Course Modules
Exam & Certification
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam meets the PECB Examination and Certification Program (ECP) requirements. It covers the following competency domains:
- Domain 1: Fundamental principles and concepts of information security incident management
- Domain 2: Information security incident management process based on ISO/IEC 27035
- Domain 3: Designing and developing an organizational incident management process based on ISO/IEC 27035
- Domain 4: Preparing and executing the incident response plan for information security incidents
- Domain 5: Implementing incident management processes and managing information security incidents
- Domain 6: Improving the incident management processes and activities
