Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Introduction to ISO/IEC 27035
- Overview of the distinct parts and overall structure of ISO/IEC 27035.
- Interrelationships with ISO/IEC 27001 and other relevant standards.
- Essential terminology, definitions, and core concepts.
Principles of Incident Management
- Identifying threats, vulnerabilities, and associated risks.
- Categorizing and classifying different types of incidents.
- Understanding the stages of the incident lifecycle.
Planning an Incident Management Program
- Establishing clear scope and strategic objectives.
- Defining roles, responsibilities, and escalation protocols.
- Drafting comprehensive incident response policies and procedures.
Incident Detection and Reporting
- Recognizing indicators of compromise and early warning signals.
- Utilizing internal and external reporting channels effectively.
- Maintaining accurate incident logs and audit records.
Incident Analysis and Evaluation
- Techniques for gathering and preserving digital evidence.
- Applying root cause analysis methods.
- Conducting impact assessments and risk evaluations.
Incident Response, Containment, and Recovery
- Strategies for containment and effective communication.
- Eradicating identified threats and underlying vulnerabilities.
- Executing system recovery and validation processes.
Post-Incident Activities and Continual Improvement
- Finalizing incident reports and comprehensive documentation.
- Analyzing lessons learned and implementing corrective actions.
- Integrating enhancements into the broader ISMS.
Summary and Next Steps
Requirements
- Solid understanding of information security management fundamentals.
- Working familiarity with ISO/IEC 27001 or comparable standards.
- Practical experience in IT security or incident response positions.
Target Audience
- Information security officers and department managers.
- Leaders and coordinators of incident response teams.
- Specialists in risk management and regulatory compliance.
Testimonials (1)
Speed of response and communication
