Get in Touch
 Duration 35 hours

Course Outline

Introduction to ISO/IEC 27035

  • Overview of the ISO/IEC 27035 parts and structural framework
  • Alignment with ISO/IEC 27001 and other relevant standards
  • Essential terms, definitions, and core concepts

Principles of Incident Management

  • Analyzing threats, vulnerabilities, and associated risks
  • Categorization and classification of incidents
  • Understanding the distinct stages of the incident lifecycle

Planning an Incident Management Program

  • Establishing scope and strategic objectives
  • Defining roles, responsibilities, and escalation pathways
  • Developing incident response policies and procedural guidelines

Detecting and Reporting Incidents

  • Identifying indicators of compromise and early warning signals
  • Establishing internal and external reporting channels
  • Maintaining accurate incident logs and documentation

Analyzing and Evaluating Incidents

  • Techniques for gathering and preserving digital evidence
  • Applying root cause analysis methodologies
  • Conducting impact assessments and risk evaluations

Responding, Containing, and Recovering from Incidents

  • Strategies for containment and effective communication
  • Eradicating threats and addressing underlying vulnerabilities
  • System recovery processes and validation checks

Post-Incident Review and Continuous Improvement

  • Finalizing incident reports and comprehensive documentation
  • Extracting lessons learned and implementing corrective actions
  • Integrating enhancements into the ISMS framework

Summary and Recommended Next Steps

Requirements

  • A solid understanding of information security management concepts
  • Familiarity with ISO/IEC 27001 or similar standards
  • Professional experience in IT security or incident response roles

Target Audience

  • Information security officers and managers
  • Incident response team leaders
  • Risk and compliance specialists

Testimonials (1)

Related Categories