ISO/IEC 27035 Foundation Training
Course Overview
Information security incidents can disrupt business operations, compromise sensitive information, and damage an organization’s reputation. Effective incident management is essential to minimizing the impact of security events and ensuring a timely and coordinated response.
The ISO/IEC 27035 Foundation course provides participants with a comprehensive introduction to the guidance contained in ISO/IEC 27035. Participants will learn the lifecycle of information security incident management, including incident preparation, identification, assessment, response, recovery, and continual improvement. The course also explains how ISO/IEC 27035 supports and complements ISO/IEC 27001 and other cybersecurity frameworks.
Target Audience
This course is intended for:
- Individuals seeking a foundational understanding of information security incident management
- Information security professionals
- Cybersecurity analysts
- IT managers and system administrators
- Incident response team members
- Security Operations Center (SOC) personnel
- Risk and compliance professionals
- Internal auditors
- Business continuity and disaster recovery professionals
- Anyone preparing for advanced ISO/IEC 27035 certifications
Learning Objectives
Upon successful completion of this course, participants will be able to:
- Understand the purpose and scope of ISO/IEC 27035.
- Explain the principles of information security incident management.
- Describe the incident management lifecycle.
- Understand incident detection, reporting, assessment, and classification.
- Explain incident response, containment, eradication, and recovery activities.
- Understand post-incident analysis and lessons learned.
- Recognize the relationship between ISO/IEC 27035 and ISO/IEC 27001.
- Prepare for the PECB ISO/IEC 27035 Foundation certification examination.
Duration
2 Days (Approximately 14–16 hours of instructor-led training)
Classroom Training
Participants attend instructor-led sessions in a classroom environment that combines lectures, interactive discussions, practical examples, and knowledge checks to reinforce learning.
Certification
Participants who successfully pass the examination will receive the:
PECB Certified ISO/IEC 27035 Foundation
The certification demonstrates that the holder has a solid understanding of the fundamental concepts and principles of information security incident management based on ISO/IEC 27035.
Course Agenda
Day 1: Introduction to ISO/IEC 27035 and Information Security Incident Management
- Course objectives and structure
- Overview of ISO/IEC 27035
- Principles of information security incident management
- Types of information security incidents
- Roles and responsibilities
- Incident management framework
- Incident preparation and planning
- Incident detection and reporting
Day 2: Incident Response, Recovery, and Certification Exam
- Incident assessment and classification
- Incident response and containment
- Eradication and recovery
- Incident communication and coordination
- Post-incident review and lessons learned
- Continual improvement
- Course review
- PECB ISO/IEC 27035 Foundation Certification Examination
Exam Duration
- Duration: 1 hour (60 minutes)
- Exam Format: Closed-book, multiple-choice examination
- Certification: Successful candidates who pass the exam may apply for the PECB Certified ISO/IEC 27035 Foundation credential in accordance with PECB certification requirements.
