ISO 27035 Incident Management Training & Certification

In today's business world, information security incidents are considered to be uncertain risks which can seriously damage a business. Thus, organizations must take actions to promptly identify, evaluate and effectively manage the incidents. The ISO/IEC 27035 Information Security Incident Management is an international standard that provides best practices and guidelines for conducting a strategic incident management plan and preparing for an incident response.

The ISO/IEC 27035 Information Security Incident Management delivers the prime principles of security to prevent and respond effectively to information security incidents. In addition, the ISO/IEC 27035 incorporates specific processes for managing information security incidents, events, and potential vulnerabilities.

ISO/IEC 27035 Lead Incident Manager training enables you to acquire the necessary expertise to support an organization in implementing an Information Security Incident Management plan based on ISO/IEC 27035. During this training course, you will gain a comprehensive knowledge of a process model for designing and developing an organizational incident management plan. The compatibility of this training course with ISO/IEC 27035 also supports the ISO/IEC 27001 by providing guidance for Information Security Incident Management.

After mastering all the necessary concepts of Information Security Incident Management, you can sit for the exam and apply for a "PECB Certified ISO/IEC 27035 Lead Incident Manager" credential. By holding a PECB Lead Incident Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Information Security Incidents.

Day 1:Introduction to Information Security Incident Management concepts as recommended by ISO/IEC 27035

• Course objectives and structure
• Standards and regulatory frameworks
• Information Security Incident Management
• ISO/IEC 27035 core processes
• Fundamental principles of Information Security
• Linkage to business continuity
• Legal and ethical issues

Day 2: Designing and preparing an Information Security Incident Management plan

• Initiating an Information Security Incident Management Process
• Understanding the organization and clarifying the information security incident management objectives
• Plan and prepare
• Roles and functions
• Policies and procedures

Day 3: Enacting the Incident Management process and handling Information Security incidents

• Communication planning
• First implementation steps
• Implementation of support items
• Detecting and reporting
• Assessment and decisions
• Responses
• Lessons learned
• Transition to operations

Day 4: Monitoring and continual improvement of the Information Security Incident Management plan

• Further analysis
• Analysis of lessons learned
• Corrective actions
• Competence and evaluation of incident managers
• Closing the training

Day 5: Certification Exam