Get in Touch
 Duration 35 hours

Course Outline

Introduction to ISO/IEC 27035

  • Examination of the parts and structural framework of ISO/IEC 27035
  • Interplay with ISO/IEC 27001 and other relevant standards
  • Core terminology, definitions, and foundational concepts

Principles of Incident Management

  • Navigating threats, vulnerabilities, and associated risks
  • Categorizing and classifying security incidents
  • Understanding the stages of the incident lifecycle

Strategic Planning for Incident Management

  • Establishing clear scope and program objectives
  • Defining roles, responsibilities, and escalation protocols
  • Developing incident response policies and operational procedures

Detection and Reporting Mechanisms

  • Identifying indicators of compromise and early warning signals
  • Establishing internal and external reporting channels
  • Maintaining accurate incident logs and documentation

Analysis and Evaluation of Incidents

  • Proper gathering and preservation of digital evidence
  • Applying root cause analysis methodologies
  • Conducting impact assessments and risk evaluations

Response, Containment, and Recovery Strategies

  • Implementing containment tactics and stakeholder communication
  • Eliminating threats and addressing underlying vulnerabilities
  • Executing system recovery and validation processes

Post-Incident Review and Continuous Improvement

  • Compiling incident reports and comprehensive documentation
  • Extracting lessons learned and defining corrective actions
  • Integrating enhancements into the broader ISMS

Conclusion and Future Directions

Requirements

  • Proficiency in core information security management concepts
  • Working knowledge of ISO/IEC 27001 or equivalent industry standards
  • Practical experience in IT security or incident response functions

Target Audience

  • Information security officers and management
  • Leaders of incident response teams
  • Risk management and compliance specialists

Testimonials (1)

Related Categories