Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Introduction to ISO/IEC 27035
- General overview of the various parts and structure of ISO/IEC 27035
- Interconnection with ISO/IEC 27001 and other relevant standards
- Essential terminology, definitions, and foundational concepts
Incident Management Principles
- Analyzing threats, vulnerabilities, and associated risks
- Categorization and classification of security incidents
- Key stages of the incident lifecycle
Planning an Incident Management Program
- Establishing clear scope and strategic objectives
- Assigning roles, defining responsibilities, and mapping escalation paths
- Drafting incident response policies and procedural guidelines
Incident Detection and Reporting
- Identifying indicators of compromise and early warning signals
- Utilizing internal and external reporting channels effectively
- Maintaining accurate incident logs and documentation records
Incident Analysis and Evaluation
- Methods for gathering and preserving digital evidence
- Applying root cause analysis techniques
- Conducting impact assessments and risk evaluations
Incident Response, Containment, and Recovery
- Deploying containment strategies and managing communications
- Eradicating identified threats and security vulnerabilities
- Executing system recovery and performing validation checks
Post-Incident Activities and Continual Improvement
- Finalizing incident reports and comprehensive documentation
- Extracting lessons learned and implementing corrective actions
- Incorporating enhancements into the broader ISMS framework
Summary and Next Steps
Requirements
- Foundational knowledge of information security management principles
- Awareness of ISO/IEC 27001 or comparable standards
- Practical experience in IT security or incident response positions
Target Audience
- Information security officers and management personnel
- Leaders of incident response teams
- Risk and compliance specialists
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
