ISO/IEC 27035 Incident Manager Training
Course Overview
Organizations face increasingly sophisticated cyber threats that require a structured and effective approach to incident management. The ISO/IEC 27035 Incident Manager course provides participants with a comprehensive understanding of the principles and practices for managing information security incidents in accordance with ISO/IEC 27035.
Through instructor-led sessions, practical exercises, and real-world case studies, participants will learn how to prepare for incidents, coordinate response activities, recover from security events, and continually improve their organization’s incident management capability.
Target Audience
This course is intended for:
- Information security professionals
- Incident response team members
- Security Operations Center (SOC) analysts
- IT managers and system administrators
- Cybersecurity professionals
- Risk management professionals
- Business continuity and disaster recovery professionals
- Internal auditors
- Security consultants
- Professionals responsible for managing or improving information security incident management processes
Learning Objectives
Upon successful completion of this course, participants will be able to:
- Understand the principles and concepts of ISO/IEC 27035.
- Explain the information security incident management lifecycle.
- Establish and maintain an effective incident management process.
- Detect, assess, classify, and prioritize information security incidents.
- Coordinate incident response and recovery activities.
- Conduct incident investigations and root cause analysis.
- Communicate effectively during security incidents.
- Monitor and continually improve incident management performance.
- Prepare for the PECB ISO/IEC 27035 Incident Manager certification examination.
Duration
4 Days (Three days of instructor-led training followed by the certification examination on Day 4.)
Classroom
Participants attend instructor-led classroom sessions featuring interactive lectures, discussions, case studies, and practical exercises designed to develop incident management skills in real-world scenarios.
Certification
After successfully passing the examination and meeting the applicable certification requirements, participants may apply for the:
PECB Certified ISO/IEC 27035 Incident Manager
The certification validates the candidate’s competence in implementing and managing an information security incident management process based on ISO/IEC 27035.
Course Agenda
Day 1: Introduction to ISO/IEC 27035 and Incident Management Fundamentals
- Training course objectives and structure
- Overview of ISO/IEC 27035
- Principles of information security incident management
- Incident management framework
- Roles and responsibilities
- Incident preparedness
Day 2: Incident Detection, Assessment, and Response
- Event monitoring and detection
- Incident reporting procedures
- Incident assessment and classification
- Incident response planning
- Containment and eradication strategies
- Communication and coordination
Day 3: Recovery, Lessons Learned, and Continual Improvement
- Recovery planning and implementation
- Evidence handling and documentation
- Root cause analysis
- Post-incident review
- Performance monitoring
- Continual improvement
- Course review and exam preparation
Day 4: Certification Examination
- PECB ISO/IEC 27035 Incident Manager Certification Examination
Exam Duration
- Exam Duration: 2 hours
- Exam Format: Closed-book examination consisting of multiple-choice and scenario-based questions.
- Passing Score: Determined by PECB in accordance with PECB certification policies.
Successful candidates who meet the applicable certification requirements may apply for the PECB Certified ISO/IEC 27035 Incident Manager credential.
