Get in Touch
 Duration 35 hours

Course Outline

Introduction to ISO/IEC 27035

  • Summary of ISO/IEC 27035 components and architecture
  • Interplay between ISO/IEC 27035 and standards such as ISO/IEC 27001
  • Essential terminology, definitions, and core concepts

Incident Management Principles

  • Comprehending threats, vulnerabilities, and risks
  • Categorizing and classifying security incidents
  • Stages of the incident lifecycle

Planning an Incident Management Program

  • Establishing scope and strategic objectives
  • Assigning roles, responsibilities, and escalation routes
  • Developing incident response policies and procedures

Incident Detection and Reporting

  • Identifying indicators of compromise and early warning signals
  • Utilizing internal and external reporting channels
  • Maintaining accurate incident logs and records

Incident Analysis and Evaluation

  • Collection and preservation of digital evidence
  • Methods for root cause analysis
  • Assessing impact and evaluating associated risks

Incident Response, Containment, and Recovery

  • Strategies for containment and effective communication
  • Eliminating threats and patching vulnerabilities
  • System restoration and validation processes

Post-Incident Activities and Continual Improvement

  • Preparing incident reports and documentation
  • Extracting lessons learned and implementing corrective actions
  • Incorporating enhancements into the ISMS

Conclusion and Future Steps

Requirements

  • Understanding of information security management fundamentals
  • Knowledge of ISO/IEC 27001 or comparable standards
  • Practical experience in IT security or incident response functions

Target Audience

  • Information security officers and managers
  • Incident response team leaders
  • Risk and compliance specialists

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories