ISO/IEC 27035 Lead Incident Manager

The ISO/IEC 27035 Lead Incident Manager training will enable you to acquire the expertise needed to assist an organization in implementing an information security incident management plan according to the ISO/IEC 27035 standard. During this training, you will gain an in-depth understanding of the process model for designing and developing an organizational incident management plan. The compatibility of this training with ISO/IEC 27035 also supports ISO/IEC 27001 by providing guidelines for information security incident management.

Specific objectives:

• Master the concepts, approaches, methods, tools, and techniques that enable effective information security incident management according to ISO/IEC 27035.
• Understand the correlation between the ISO/IEC 27035 standard and other standards and regulatory frameworks.

• Basic understanding of the ISO/IEC 27035 standard and in-depth knowledge of information security

• Code: ISO/IEC 27035
• Duration: 5 days
• Schedule: 8:30 AM - 5:30 PM
• Location: Training Center, North Urban Center

• Information security incident managers
• IT managers
• IT auditors

• Course materials
• 40% demonstration
• 40% theory
• 20% practical exercises

• Day 1: Introduction to concepts related to information security incident management, as defined by ISO/IEC 27035
  • Training objectives and structure
  • Normative and regulatory frameworks
  • Information security incident management
  • Basic processes of the ISO/IEC 27035 standard
  • Fundamental principles of information security
  • Correlation with business continuity
  • Legal and ethical issues
• Day 2: Design and preparation of an information security incident management plan
  • Launching an information security incident management process
  • Understanding the organization and clarifying information security incident management objectives
  • Plan and prepare
  • Roles and functions
  • Policies and procedures
• Day 3: Launching an incident management process and handling information security incidents
  • Communication planning
  • First implementation steps
  • Implementation of support elements
  • Detection and reporting
  • Assessment and decisions
  • Responses
  • Lessons learned
  • Transition to operations
• Day 4: Monitoring and continuous improvement of the information security incident management plan
  • Additional analysis
  • Lessons learned analysis
  • Corrective measures
  • Competence and evaluation of incident managers
  • Training closure
• Day 5: Certification exam