ISO/IEC 27035 Lead Incident Manager

Description

Why Should You Attend the ISO/IEC 27035 Lead Incident Manager Course?

Whether deliberate or accidental, information security incidents are almost inevitable in the digital age, impacting organizations of all sizes and sectors. Learning to navigate the complexities of information security incident detection, assessment, response, and reporting allows participants to assist organizations in ensuring the safety of their information and reducing negative business consequences.

This training course aligns with ISO/IEC 27001, ISO/IEC 27005, and other standards in the ISO/IEC 27000 series and provides practical guidance on information security.

Who Should Attend?

This training course is intended for:

• Managers or consultants seeking to expand their knowledge of information security incident management
• Professionals seeking to establish and manage effective incident response teams (IRTs)
• IT professionals and information security risk managers seeking to enhance their knowledge in information security incident management
• Members of incident response teams
• Incident response coordinators or other roles with responsibilities for incident handling and response

Learning Objectives

By successfully completing this training course, you will be able to:

• Explain the fundamental principles of incident management
• Develop and implement effective incident response plans tailored to the organization’s needs and select an incident response team
• Conduct thorough risk assessments to identify potential threats and vulnerabilities within an organization
• Apply good practices from various international standards to enhance the efficiency and effectiveness of incident response efforts
• Conduct post-incident analysis and identify lessons learned

Educational Approach

The training course is centered on:

• This training course combines theoretical concepts with best practices for implementing an information security incident management process.
• The training course contains essay-type exercises and multiple-choice quizzes, some of which are scenario-based.
• The participants are encouraged to collaborate and engage in meaningful discussions with fellow learners while tackling quizzes and exercises.
• The quiz format closely mirrors that of the certification exam, ensuring participants are well-prepared for their exam.

Prerequisites

The main requirement for participating in this training course is having a general knowledge of incident management processes, information security principles, and the ISO/IEC 27000 family of standards.

ISO/IEC 27035 Lead Incident Manager Course Agenda

• Day 1: Introduction to information security incident management concepts and ISO/IEC 27035
• Day 2: Designing and preparing an information security incident management plan
• Day 3: Detecting and reporting information security incidents
• Day 4: Monitoring and continual improvement of the information security incident management process
• Day 5: Certification exam

ISO/IEC 27035 Lead Incident Manager Certification Examination

The exam fully meets the requirements of the PECB Examination and Certificate Program. It covers the following competency domains:

• Domain 1: Fundamental principles and concepts of information security incident management
• Domain 2: Information security incident management process based on ISO/IEC 27035
• Domain 3: Designing and developing an organizational incident management process based on ISO/IEC 27035
• Domain 4: Preparing and executing the incident response plan for information security incidents
• Domain 5: Implementing incident management processes and managing information security incidents
• Domain 6: Improving the incident management processes and activities

Additional Information

• Training Days: 5
• CPD Certification (Credits): 31
• Exam Duration: 3 hour (open book)
• Free Retake Exam: Yes