Cognicert ISO/IEC 27035 Information Security Incident Manager Course

Apply information security incident management techniques to incident preparation, response coordination and lessons learned and use the results to inform workplace decisions.

Work through incident preparation, response coordination and lessons learned and connect them to the responsibilities of your professional role. The detailed programme explains the methods and activities covered.

1. Information Security Professionals: Security managers, officers, and analysts responsible for incident response and management.
2. IT Managers and Administrators: IT personnel who play a role in responding to and mitigating security incidents.
3. Compliance Officers: Professionals tasked with ensuring that the organization adheres to security standards and regulations.
4. Business Continuity and Disaster Recovery Teams: Those responsible for maintaining business continuity in the event of security incidents.
5. Risk Managers: Professionals focused on assessing and managing information security risks.
6. Incident Responders: Individuals involved in the technical aspects of incident handling, such as forensics and incident analysis.

1. Comprehensive Understanding: Ensure participants have a deep understanding of ISO/IEC 27035 and its relevance to information security incident management.
2. Incident Identification: Teach participants how to recognize and classify various types of information security incidents.
3. Incident Response Planning: Enable participants to develop and implement incident response plans and procedures aligned with ISO/IEC 27035.
4. Effective Incident Handling: Equip participants with the skills to respond promptly and effectively to security incidents, including containment, eradication, and recovery.
5. Evidence Preservation: Provide knowledge on preserving digital evidence during incident response for potential legal and forensic purposes.
6. Reporting and Communication: Teach participants how to communicate and report incidents internally and externally, as required.
7. Continuous Improvement: Encourage participants to continuously improve their incident management processes through lessons learned and post-incident analysis.

• Overview of ISO/IEC 27035 and its importance
• Role of incident management in information security
• Relation to other ISO/IEC standards (e.g., ISO/IEC 27001)

• Identifying and classifying information security incidents
• Incident categorization and severity assessment
• Early warning signs and indicators

• Developing an incident response plan
• Establishing an incident management team
• Legal and regulatory considerations

• Incident handling phases (preparation, detection, containment, eradication, recovery, lessons learned)
• Escalation procedures and decision-making during an incident
• Coordinating response efforts

• Preserving digital evidence during incident response
• Chain of custody and forensic considerations
• Legal admissibility of evidence

• Internal and external incident reporting requirements
• Communicating with stakeholders, including regulatory bodies and law enforcement
• Managing public relations during incidents

• Conducting post-incident analysis and root cause analysis
• Lessons learned and continuous improvement
• Updating incident response plans based on findings

• Real-world examples of effective incident management
• Best practices from organizations with mature incident response programs

• Developing an action plan for implementing ISO/IEC 27035 practices within participants' organizations
• Steps to initiate and sustain effective incident management practices

• Opportunity for participants to ask questions and seek clarification
• Course evaluation and feedback collection

• Case Study
• Individual Exercises
• Role Play
• Group Exercises
• Group Presentation
• Examination

• Self-Study Material, Exam and Certification 
• Online Training, Material, Exam and Certification 
• Classroom Training Location: https://cognicert.com/delivery-partners/