Get in Touch
 Duration 35 hours

Course Outline

Introduction to ISO/IEC 27035

  • Overview of ISO/IEC 27035 parts and framework
  • Alignment with ISO/IEC 27001 and other standards
  • Essential terminology, definitions, and concepts

Incident Management Principles

  • Analyzing threats, vulnerabilities, and risks
  • Categorization and classification of incidents
  • Phases of the incident lifecycle

Planning an Incident Management Program

  • Establishing scope and objectives
  • Defining roles, responsibilities, and escalation routes
  • Formulating incident response policies and procedures

Incident Detection and Reporting

  • Identifying indicators of compromise and early warning signs
  • Utilizing internal and external reporting channels
  • Maintaining accurate incident logs and records

Incident Analysis and Evaluation

  • Collecting and preserving evidence
  • Applying root cause analysis techniques
  • Conducting impact assessments and risk evaluations

Incident Response, Containment, and Recovery

  • Implementing containment strategies and communication protocols
  • Eradicating threats and vulnerabilities
  • Restoring systems and validating operations

Post-Incident Activities and Continual Improvement

  • Preparing incident reports and documentation
  • Extracting lessons learned and implementing corrective actions
  • Integrating improvements into the ISMS

Summary and Next Steps

Requirements

  • Understanding of information security management concepts
  • Exposure to ISO/IEC 27001 or equivalent standards
  • Background experience in IT security or incident response

Target Audience

  • Information security officers and managers
  • Incident response team leaders
  • Risk and compliance specialists

Testimonials (1)

Related Categories