Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to ISO/IEC 27035
- Overview of the parts and structure of ISO/IEC 27035.
- Relationship with ISO/IEC 27001 and other relevant standards.
- Key terms, definitions, and core concepts.
Incident Management Principles
- Understanding threats, vulnerabilities, and risks.
- Incident categories and classification methods.
- Stages of the incident lifecycle.
Planning an Incident Management Program
- Defining scope and objectives.
- Clarifying roles, responsibilities, and escalation paths.
- Establishing incident response policies and procedures.
Incident Detection and Reporting
- Identifying indicators of compromise and early warning signs.
- Utilizing internal and external reporting channels.
- Maintaining accurate incident logs and records.
Incident Analysis and Evaluation
- Gathering and preserving evidence.
- Applying root cause analysis techniques.
- Conducting impact assessments and risk evaluations.
Incident Response, Containment, and Recovery
- Implementing containment strategies and communication plans.
- Eliminating threats and vulnerabilities.
- Executing system recovery and validation.
Post-Incident Activities and Continual Improvement
- Preparing incident reports and documentation.
- Documenting lessons learned and identifying corrective actions.
- Integrating improvements into the ISMS.
Summary and Next Steps
Requirements
- Understanding of information security management concepts.
- Familiarity with ISO/IEC 27001 or analogous standards.
- Previous experience in IT security or incident response roles.
Target Audience
- Information security officers and managers.
- Leaders of incident response teams.
- Professionals in risk and compliance.
35 Hours
Testimonials (1)
Speed of response and communication