The ISO/IEC 27035 Information Security Incident Management delivers the prime principles of security to prevent and respond effectively to information security incidents. In addition, the ISO/IEC 27035 incorporates specific processes for managing information security incidents, events, and potential vulnerabilities.
- Take the training course
- Access the materials on KATE
- Enter the exam at your most convenient date, time, and location via PECB Exams
Learning Objectives
- Master the concepts, approaches, methods, tools and techniques that enable an effective Information Security Incident Management according to ISO/IEC 27035
- Acknowledge the correlation between ISO/IEC 27035 and other standards and regulatory frameworks
- Acquire the expertise to support an organization to effectively implement, manage and maintain an Information Security Incident Response plan
- Acquire the competence to effectively advise organizations on the best practices of Information Security Incident Management
- Understand the importance of establishing well-structured procedures and policies for Incident Management processes
- Develop the expertise to manage an effective Incident Response Team
Why should you attend?
ISO/IEC 27035 Lead Incident Manager training enables you to acquire the necessary expertise to support an organization in implementing an Information Security Incident Management plan based on ISO/IEC 27035. During this training course, you will gain a comprehensive knowledge of a process model for designing and developing an organizational incident management plan. The compatibility of this training course with ISO/IEC 27035 also supports the ISO/IEC 27001 by providing guidance for Information Security Incident Management.
After mastering all the necessary concepts of Information Security Incident Management, you can sit for the exam and apply for a “PECB Certified ISO/IEC 27035 Lead Incident Manager” credential. By holding a PECB Lead Incident Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Information Security Incidents.
Who should attend?
- Information Security Incident managers
- IT Managers
- IT Auditors
- Managers seeking to establish an Incident Response Team (IRT)
- Managers seeking to learn more about operating effective IRTs
- Information Security risk managers
- IT system administration professionals
- IT network administration professionals
- Members of Incident Response Teams
- Individuals responsible for Information Security within an organization
Educational approach
- This training is based on both theory and best practices used in the implementation of an Information Security Incident Management plan
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on a case study which includes role playing and discussions
- Practice tests are similar to the Certification Exam
Prerequisites
A fundamental understanding of ISO/IEC 27035 and comprehensive knowledge of Information Security.
Training course structure
Introduction to Information Security Incident Management concepts as recommended by ISO/IEC 27035
- Course objectives and structure
- Standards and regulatory frameworks
- Information Security Incident Management
- ISO/IEC 27035 core processes
- Fundamental principles of Information Security
- Linkage to business continuity
- Legal and ethical issues
Designing and preparing an Information Security Incident Management plan
- Initiating an Information Security Incident Management Process
- Understanding the organization and clarifying the information security incident management objectives
- Plan and prepare
- Roles and functions
- Policies and procedures
Enacting the Incident Management process and handling Information Security incidents
- Communication planning
- First implementation steps
- Implementation of support items
- Detecting and reporting
- Assessment and decisions
- Responses
- Lessons learned
- Transition to operations
Monitoring and continual improvement of the Information Security Incident Management plan
- Further analysis
- Analysis of lessons learned
- Corrective actions
- Competence and evaluation of incident managers
- Closing the training
Certification Exam
Examination
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
- Domain 1 Fundamental principles and concepts of Information Security Incident Management
- Domain 2 Information Security Incident Management best practices based on ISO/IEC 27035
- Domain 3 Designing and developing an Organizational Incident Management process based on ISO/IEC 27035
- Domain 4 Preparing for Information Security incidents and implementing an Incident Management Plan
- Domain 5 Enacting the Incident Management Process and handling Information Security Incidents
- Domain 6 Performance measurement and monitoring
- Domain 7 Improving the Incident Management processes and activities
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
Certification
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about ISO/IEC 27035 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Manager Certifications are:
PECB Certified ISOIEC 27035 Incident Manager
To be considered valid, these Information Security Incident Management activities should follow best implementation and management practices and include the following
- Drafting an Information Security Incident Management plan
- Implementing Information Security Incident Management processes
- Managing Information Security Incident processes
- Conducting forensics investigation
- Monitoring and analyzing security events
- Identifying potential threats and security trends
- Vulnerabilities assessment
- Monitoring and managing risks
- Implementing corrective or preventive actions
- Performing internal controls
- Managing an Incident Response Team
