Why should you attend?
ISO/IEC 27035 Lead Incident Manager training enables you to acquire the necessary expertise to support an organization in implementing an Information Security Incident Management plan based on ISO/IEC 27035. During this training course, you will gain a comprehensive knowledge of a process model for designing and developing an organizational incident management plan. The compatibility of this training course with ISO/IEC 27035 also supports the ISO/IEC 27001 by providing guidance for Information Security Incident Management.
After mastering all the necessary concepts of Information Security Incident Management, you can sit for the exam and apply for a “PECB Certified ISO/IEC 27035 Lead Incident Manager” credential. By holding a PECB Lead Incident Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Information Security Incidents.
Who should attend?
- Information Security Incident managers
- IT Managers
- IT Auditors
- Managers seeking to establish an Incident Response Team (IRT)
- Managers seeking to learn more about operating effective IRTs
- Information Security risk managers
- IT system administration professionals
- IT network administration professionals
- Members of Incident Response Teams
- Individuals responsible for Information Security within an organization
Learning objectives
- Master the concepts, approaches, methods, tools and techniques that enable an effective Information Security Incident Management according to ISO/IEC 27035
- Acknowledge the correlation between ISO/IEC 27035 and other standards and regulatory frameworks
- Acquire the expertise to support an organization to effectively implement, manage and maintain an Information Security Incident Response plan
- Acquire the competence to effectively advise organizations on the best practices of Information Security Incident Management
- Understand the importance of establishing well-structured procedures and policies for Incident Management processes
- Develop the expertise to manage an effective Incident Response Team
Educational approach
- This training is based on both theory and best practices used in the implementation of an Information Security Incident Management plan
- Lecture sessions are illustrated with examples based on case studies
- Practical exercises are based on a case study which includes role playing and discussions
- Practice tests are similar to the Certification Exam
Prerequisites
A fundamental understanding of ISO/IEC 27035 and comprehensive knowledge of Information Security.
More Details
Course Agenda
- Day 1: Introduction to Information Security Incident Management concepts as recommended by ISO/IEC 27035
- Day 2: Designing and preparing an Information Security Incident Management plan
- Day 3: Enacting the Incident Management process and handling Information Security incidents
- Day 4: Monitoring and continual improvement of the Information Security Incident Management plan
- Day 5: Certification Exam
Examination
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
- Domain 1: Fundamental principles and concepts of Information Security Incident Management
- Domain 2: Information Security Incident Management best practices based on ISO/IEC 27035
- Domain 3: Designing and developing an Organizational Incident Management process based on ISO/IEC 27035
- Domain 4: Preparing for Information Security incidents and implementing an Incident Management Plan
- Domain 5: Enacting the Incident Management Process and handling Information Security Incidents
- Domain 6: Performance measurement and monitoring
- Domain 7: Improving the Incident Management processes and activities
Certification
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about ISO/IEC 27035 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Manager Certifications are:
| Credential | Exam | Professional experience | ISIMMS project experience | Other requirements |
| PECB Certified ISO/IEC 27035 Provisional Incident Manager | PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent | None | None | Signing the PECB Eode of Ethics |
| PECB Certified ISO/IEC 27035 Incident Manager | PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent | Two years: One year of work experience in Information Security Incident Management | ISIM activities: a total of 200 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27035 Lead Incident Manager | PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent | Five years: Two years of work experience in Information Security Incident Management | ISIM activities: a total of 300 hours | Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27035 Senior Lead Incident Manager | PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent | Ten years: Seven years of work experience in Information Security Incident Management | ISIM activities: a total of 1,000 hours | Signing the PECB Code of Ethics |
To be considered valid, these Information Security Incident Management activities should follow best implementation and management practices and include the following
- Drafting an Information Security Incident Management plan
- Implementing Information Security Incident Management processes
- Managing Information Security Incident processes
- Conducting forensics investigation
- Monitoring and analyzing security events
- Identifying potential threats and security trends
- Vulnerabilities assessment
- Monitoring and managing risks
- Implementing corrective or preventive actions
- Performing internal controls
- Managing an Incident Response Team
General Information
- Certification and examination fees are included in the price of the training course
- Training material containing over 450 pages of information and practical examples will be distributed
- An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- In case of exam failure, you can retake the exam within 12 months for free
