- Duration: 3 days
Course Overview
The PECB Certified ISO/IEC 27035 Incident Manager training course provides participants with the knowledge and practical understanding required to support an organization in implementing, managing, and maintaining an Information Security Incident Management Plan based on ISO/IEC 27035.
The course covers the key principles, processes, and best practices for identifying, assessing, responding to, and managing information security incidents. Participants will explore the different phases of incident management, including planning and preparation, detection and reporting, assessment and decision-making, incident response, and lessons learned.
Upon successful completion of the examination, participants may apply for the PECB Certified ISO/IEC 27035 Incident Manager credential, subject to the applicable professional experience and certification requirements.
Learning Objectives
By the end of this training course, participants will be able to:
- Understand the relationship between ISO/IEC 27035 and other relevant standards and regulatory frameworks.
- Explain the fundamental principles and concepts of Information Security Incident Management.
- Understand the processes, methods, techniques, and approaches associated with incident management.
- Support the implementation of an Information Security Incident Management Plan based on ISO/IEC 27035.
- Understand the roles, responsibilities, policies, procedures, and communication arrangements required for effective incident management.
- Support an organization in implementing, managing, and maintaining an Information Security Incident Response Plan.
- Understand the processes involved in detecting, reporting, assessing, responding to, and learning from information security incidents.
Target Audience
This course is suitable for:
- Information Security Incident Managers.
- Individuals responsible for incident response within an organization.
- Information security team members.
- IT Managers.
- IT system administration professionals.
- IT network administration professionals.
- IT auditors.
- Members of Incident Response Teams.
Course Content
Day 1: Introduction to Information Security Incident Management
- Course objectives and structure.
- Overview of relevant standards and regulatory frameworks.
- Fundamental concepts of Information Security Incident Management.
- Core processes of ISO/IEC 27035.
- Fundamental principles of information security.
- Legal and ethical considerations in incident management.
Day 2: Information Security Incident Management Phases
- Initiating the Information Security Incident Management process.
- Understanding the organization and defining incident management objectives.
- Planning and preparation for incident management.
- Defining roles, responsibilities, and functions.
- Establishing incident management policies and procedures.
- Developing communication plans for information security incidents.
Day 3: Implementing the Incident Management Plan
- Initial steps for implementing an Information Security Incident Management Plan.
- Implementation of supporting elements and resources.
- Detecting and reporting information security incidents.
- Incident assessment and decision-making.
- Incident response and handling.
- Lessons learned and continual improvement.
- Transition to operational activities.
- Course review and certification examination.
Examination and Certification
The PECB Certified ISO/IEC 27035 Incident Manager examination complies with the requirements of the PECB Examination and Certification Programme (ECP).
The examination covers the following competency domains:
- Domain 1: Fundamental Principles and Concepts of Information Security Incident Management.
- Domain 2: Information Security Incident Management Plan Implementation Based on ISO/IEC 27035.
- Domain 3: Enacting the Incident Management Process and Handling Information Security Incidents.
Examination duration: 3 hours.
Upon successfully completing the examination, participants may apply for the relevant PECB credential, subject to meeting the applicable certification requirements.
Certification Requirements
Participants may apply for one of the following credentials, depending on their qualifications and professional experience.
- PECB Certified ISO/IEC 27035 Provisional Incident Manager
- Examination: Successful completion of the PECB Certified ISO/IEC 27035 Incident Manager examination or an equivalent examination.
- Professional experience: No professional experience required.
- Information Security Incident Management (ISIM) experience: None required.
- Other requirements: Signing the PECB Code of Ethics.
- PECB Certified ISO/IEC 27035 Incident Manager
- Examination: Successful completion of the PECB Certified ISO/IEC 27035 Incident Manager examination or an equivalent examination.
- Professional experience: Two years of professional work experience, including one year of work experience in Information Security Incident Management.
- ISIM activities: A total of 200 hours of incident management activities.
- Other requirements: Signing the PECB Code of Ethics.
The final credential awarded is subject to PECB’s applicable certification rules and verification of the candidate’s eligibility.
Course Benefits
- Examination and certification fees are included in the training course fee.
- Participants receive training materials containing over 350 pages of information and practical examples.
- A participation certificate equivalent to 21 Continuing Professional Development (CPD) credits will be issued.
- Participants who fail the examination may retake it within 12 months at no additional examination fee, subject to the applicable PECB terms and conditions.
- Gain a structured understanding of ISO/IEC 27035 incident management principles and processes.
- Develop knowledge to support organizational incident response planning and implementation.
Prerequisites
The supplied course information does not specify formal prerequisites for attending the training. However, a basic understanding of information security, IT operations, or incident response may be beneficial.
Certification Body
PECB (Professional Evaluation and Certification Board)
PECB provides professional training, examination, and certification services across information security, risk management, governance, and related professional disciplines.