Cognicert ISO/IEC 27035 Information Security Incident Manager Course

Training Overview: ISO/IEC 27035 Information Security Incident Management training is designed to equip professionals with the knowledge and skills necessary to effectively manage and respond to information security incidents within an organization. This training program covers incident management principles, processes, and best practices outlined in ISO/IEC 27035 to ensure that organizations can identify, assess, and mitigate security incidents while minimizing potential damage. Target Audience: The target audience for ISO/IEC 27035 Information Security Incident Management training includes:

Information Security Professionals: Security managers, officers, and analysts responsible for incident response and management.
IT Managers and Administrators: IT personnel who play a role in responding to and mitigating security incidents.
Compliance Officers: Professionals tasked with ensuring that the organization adheres to security standards and regulations.
Business Continuity and Disaster Recovery Teams: Those responsible for maintaining business continuity in the event of security incidents.
Risk Managers: Professionals focused on assessing and managing information security risks.
Incident Responders: Individuals involved in the technical aspects of incident handling, such as forensics and incident analysis.

Reference Standards: The primary reference standard for ISO/IEC 27035 Information Security Incident Management training is ISO/IEC 27035 itself, titled "Information technology — Security techniques — Information security incident management." This standard provides guidelines and best practices for establishing and operating an incident management process. Training Objectives:

Comprehensive Understanding: Ensure participants have a deep understanding of ISO/IEC 27035 and its relevance to information security incident management.
Incident Identification: Teach participants how to recognize and classify various types of information security incidents.
Incident Response Planning: Enable participants to develop and implement incident response plans and procedures aligned with ISO/IEC 27035.
Effective Incident Handling: Equip participants with the skills to respond promptly and effectively to security incidents, including containment, eradication, and recovery.
Evidence Preservation: Provide knowledge on preserving digital evidence during incident response for potential legal and forensic purposes.
Reporting and Communication: Teach participants how to communicate and report incidents internally and externally, as required.
Continuous Improvement: Encourage participants to continuously improve their incident management processes through lessons learned and post-incident analysis.

Training Content: The training content should cover a range of topics to meet the specified objectives. Here's a breakdown of the content: Module 1: Introduction to ISO/IEC 27035

Overview of ISO/IEC 27035 and its importance
Role of incident management in information security
Relation to other ISO/IEC standards (e.g., ISO/IEC 27001)

Module 2: Incident Classification and Identification

Identifying and classifying information security incidents
Incident categorization and severity assessment
Early warning signs and indicators

Module 3: Incident Response Planning

Developing an incident response plan
Establishing an incident management team
Legal and regulatory considerations

Module 4: Incident Handling and Response

Incident handling phases (preparation, detection, containment, eradication, recovery, lessons learned)
Escalation procedures and decision-making during an incident
Coordinating response efforts

Module 5: Digital Evidence Preservation

Preserving digital evidence during incident response
Chain of custody and forensic considerations
Legal admissibility of evidence

Module 6: Incident Reporting and Communication

Internal and external incident reporting requirements
Communicating with stakeholders, including regulatory bodies and law enforcement
Managing public relations during incidents

Module 7: Post-Incident Analysis and Lessons Learned

Conducting post-incident analysis and root cause analysis
Lessons learned and continuous improvement
Updating incident response plans based on findings

Module 8: Case Studies and Best Practices

Real-world examples of effective incident management
Best practices from organizations with mature incident response programs

Module 9: Action Plan and Implementation

Developing an action plan for implementing ISO/IEC 27035 practices within participants' organizations
Steps to initiate and sustain effective incident management practices

Module 10: Q&A and Course Evaluation

Opportunity for participants to ask questions and seek clarification
Course evaluation and feedback collection

Training Methodologies

Case Study
Individual Exercises
Role Play
Group Exercises
Group Presentation
Examination

Duration: 5 Days Delivery Options:

Self-Study Material, Exam and Certification
Online Training, Material, Exam and Certification
Classroom Training Location: https://www.cognicert.com/delivery-partners/

Frequently Asked Questions: https://www.cognicert.com/faqs/ Enroll Now [contact-form-7 id="2fc7c20" title="Course Sign up"]

TRAINING DATES	EXAM	APPLICATION DEADLINE	LATE APPLICATION	ONLINE FEE	SELF-STUDY FEE	ENROL
23–27 February 2026	27 February 2026	3 February 2026	10 February 2026	£1,500	£600	Enrol
4–8 May 2026	8 May 2026	13 April 2026	21 April 2026	£1,500	£600	Enrol
3–7 August 2026	7 August 2026	13 July 2026	20 July 2026	£1,500	£600	Enrol
9–13 November 2026	13 November 2026	12 October 2026	21 October 2026	£1,500	£600	Enrol

Cognicert ISO/IEC 27035 Information Security Incident Manager Course

Training, exam and application dates

Related Cognicert resources