Course Outline
Introduction to ISO/IEC 27035
- Comprehensive overview of the ISO/IEC 27035 components and architecture
- Alignment and relationship with ISO/IEC 27001 and other relevant standards
- Essential terminology, definitions, and foundational concepts
Core Principles of Incident Management
- Assessing threats, vulnerabilities, and associated risks
- Categorizing and classifying security incidents
- Understanding the various stages of the incident lifecycle
Designing an Incident Management Program
- Establishing clear scope and strategic objectives
- Defining roles, accountability, and escalation protocols
- Drafting incident response policies and operational procedures
Detecting and Reporting Incidents
- Identifying indicators of compromise and early warning signals
- Utilizing internal and external reporting mechanisms
- Maintaining accurate incident logs and documentation
Analyzing and Evaluating Incidents
- Collecting and securing digital evidence
- Applying root cause analysis methodologies
- Conducting impact assessments and risk evaluations
Responding, Containing, and Recovering from Incidents
- Implementing containment strategies and managing communications
- Eradicating threats and addressing underlying vulnerabilities
- Restoring systems and validating operational integrity
Post-Incident Actions and Continuous Improvement
- Finalizing incident reports and documentation
- Extracting lessons learned and executing corrective measures
- Incorporating improvements into the broader ISMS
Wrap-up and Future Directions
Requirements
- Solid understanding of information security management concepts
- Proficiency with ISO/IEC 27001 or comparable industry standards
- Practical experience in IT security or incident response functions
Target Audience
- Information security officers and department managers
- Leaders of incident response teams
- Specialists in risk management and regulatory compliance
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 7250 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
