The ISO/IEC 27035 Information Security Incident Management delivers the prime principles of security to prevent and respond effectively to information security incidents. In addition, the ISO/IEC 27035 incorporates specific processes for managing information security incidents, events, and potential vulnerabilities.
The ISO/IEC 27035 Lead Incident Manager training course equips participants with the knowledge and skills necessary to support organizations in establishing and implementing a process for managing information security incidents. This training course is based on the ISO/IEC 27035 series and other good practices of incident management and covers the entire incident lifecycle, from incident planning to post-incident activities. In addition, participants will also learn about the role of key stakeholders and the importance of working with other organizations to handle information security incidents.
- Take the training course
- Access the materials on KATE
- Enter the exam at your most convenient date, time, and location via PECB Exams
Learning Objectives
- Explain the fundamental principles of incident management
- Develop and implement effective incident response plans tailored to the organization’s needs and select an incident response team
- Conduct thorough risk assessments to identify potential threats and vulnerabilities within an organization
- Apply good practices from various international standards to enhance the efficiency and effectiveness of incident response efforts
- Conduct post-incident analysis and identify lessons learned
Why should you attend?
Whether deliberate or accidental, information security incidents are almost inevitable in the digital age, impacting organizations of all sizes and sectors. Learning to navigate the complexities of information security incident detection, assessment, response, and reporting allows participants to assist organizations in ensuring the safety of their information and reducing negative business consequences.
This training course aligns with ISO/IEC 27001, ISO/IEC 27005, and other standards in the ISO/IEC 27000 series and provides practical guidance on information security.
Upon completing the course and its exam, participants can apply for the “PECB Certified ISO/IEC 27035 Lead Incident Manager” credential, showcasing their proficiency in strategically and effectively managing and mitigating information security incidents.
Who should attend?
This training course is intended for:
- Managers or consultants seeking to expand their knowledge of information security incident management
- Professionals seeking to establish and manage effective incident response teams (IRTs)
- IT professionals and information security risk managers seeking to enhance their knowledge in information security incident management
- Members of incident response teams
- Incident response coordinators or other roles with responsibilities for incident handling and response
Educational approach
- This training course combines theoretical concepts with best practices for implementing an information security incident management process.
- The training course contains essay-type exercises and multiple-choice quizzes, some of which are scenario-based.
- The participants are encouraged to collaborate and engage in meaningful discussions with fellow learners while tackling quizzes and exercises.
- The quiz format closely mirrors that of the certification exam, ensuring participants are well-prepared for their exam.
Prerequisites
The main requirement for participating in this training course is having a general knowledge of incident management processes, information security principles, and the ISO/IEC 27000 family of standards
Training course structure
Introduction to Information Security Incident Management and ISO/IEC 27035
- Training course objectives and structure
- Standards and regulatory frameworks
- Fundamental concepts of incident management
- Information security incident management
- Context establishment
- Policies and procedures
Designing and preparing an Information Security Incident Management plan
- Risk management
- Incident management plan
- Incident management team
- Internal and external relationships
- Technical and other support
- Information security incident awareness and training
Detecting and reporting information security incidents
- Testing
- Monitor systems and networks
- Detect and alert
- Information collection for incidents
- Report information security events
- Information security event assessment
Monitoring and continual improvement of the information security incident management process
- Resolve information security incidents
- Containment, eradication, and recovery
- Lessons learned
- Monitoring, measurement, analysis, and evaluation
- Continual improvement
- Closing of the training course
Certification Exam
- 3 Hours exam
Examination
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam meets the PECB Examination and Certification Program (ECP) requirements. It covers the following competency domains:
- Domain 1: Fundamental principles and concepts of information security incident management
- Domain 2: Information security incident management process based on ISO/IEC 27035
- Domain 3: Designing and developing an organizational incident management process based on ISO/IEC 27035
- Domain 4: Preparing and executing the incident response plan for information security incidents
- Domain 5: Implementing incident management processes and managing information security incidents
- Domain 6: Improving the incident management processes and activities
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
Certification
After passing the exam, you can apply for one of the credentials listed in the table below. You will receive a certification once you fulfill all the requirements of the selected credential. For more information about ISO/IEC 27035 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Manager Certifications are:
PECB Certified ISOIEC 27035 Lead Incident Manager
The Lead incident management project experience should follow best implementation practices and include the following:
- Defining an incident management approach
- Determining the incident management objectives and scope
- Performing risk assessment
- Developing an incident management program
- Defining risk evaluation and risk acceptance criteria
- Evaluating risk treatment options
- Monitoring and reviewing the incident management program
Benefits of PECB ISO/IEC 27035 Certification
A PECB ISO/IEC 27035 certificate demonstrates that you can:
- Understand the principles and concepts of information security incident management
- Identify and evaluate the effectiveness of an organization’s incident response capability to ensure security incident preparedness
- Assist an organization in planning and establishing the necessary capabilities for incident response and management
- Conduct an assessment of incident response within an organization to identify weaknesses and recommendations for continuous improvement
- Guide an organization in the development and implementation of an incident management plan, including incident detection, assessment, response, and recovery processes
- Manage and coordinate incident handling efforts to minimize impact and recover from incidents efficiently
