Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Foundations of ISO/IEC 27035
- Survey of the various parts and structural layout of ISO/IEC 27035.
- Interconnection with ISO/IEC 27001 and other relevant standards.
- Essential terminology, definitions, and foundational concepts.
Core Principles of Incident Management
- Analyzing threats, vulnerabilities, and associated risks.
- Categorizing and classifying different types of incidents.
- Understanding the distinct stages of the incident lifecycle.
Designing an Incident Management Program
- Establishing clear scope and strategic objectives.
- Defining roles, responsibilities, and escalation protocols.
- Drafting incident response policies and operational procedures.
Identifying and Reporting Incidents
- Recognizing indicators of compromise and early warning signals.
- Utilizing internal and external reporting channels effectively.
- Maintaining accurate incident logs and documentation.
Investigating and Assessing Incidents
- Collecting and preserving digital evidence.
- Applying root cause analysis methodologies.
- Conducting impact assessments and risk evaluations.
Responding, Containing, and Recovering
- Implementing containment strategies and managing communication.
- Eliminating underlying threats and vulnerabilities.
- Executing system recovery and validation processes.
Post-Incident Review and Continuous Improvement
- Compiling incident reports and final documentation.
- Extracting lessons learned and initiating corrective actions.
- Incorporating enhancements into the broader ISMS framework.
Conclusion and Future Pathways
Requirements
- Foundational knowledge of information security management concepts.
- Working familiarity with ISO/IEC 27001 or comparable standards.
- Professional experience in IT security or incident response functions.
Target Audience
- Information security officers and management personnel.
- Heads of incident response teams.
- Risk management and compliance specialists.
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
