Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Introduction to ISO/IEC 27035
- Summary of ISO/IEC 27035 components and structural layout
- Alignment with ISO/IEC 27001 and other relevant standards
- Essential terminology, definitions, and foundational concepts
Incident Management Principles
- Analyzing threats, vulnerabilities, and associated risks
- Categorizing and classifying security incidents
- Stages of the incident lifecycle
Planning an Incident Management Program
- Establishing scope and strategic objectives
- Assigning roles, duties, and escalation protocols
- Defining incident response policies and operational procedures
Incident Detection and Reporting
- Identifying indicators of compromise and early warning signals
- Managing internal and external reporting pathways
- Ensuring accurate maintenance of incident logs and documentation
Incident Analysis and Evaluation
- Collecting and safeguarding forensic evidence
- Applying root cause analysis methods
- Conducting impact assessments and risk evaluations
Incident Response, Containment, and Recovery
- Executing containment strategies and managing communications
- Eliminating identified threats and vulnerabilities
- Restoring and validating system integrity
Post-Incident Activities and Continual Improvement
- Finalizing incident reports and detailed documentation
- Extracting lessons learned and implementing corrective measures
- Incorporating enhancements into the broader ISMS
Summary and Next Steps
Requirements
- Solid understanding of information security management principles
- Working knowledge of ISO/IEC 27001 or similar frameworks
- Practical experience in IT security or incident response functions
Target Audience
- Information security officers and department managers
- Leaders of incident response teams
- Specialists in risk management and compliance
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
