Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Introduction to ISO/IEC 27035
- Summary of ISO/IEC 27035 components and organizational structure.
- Interconnection with ISO/IEC 27001 and other industry standards.
- Essential terminology, definitions, and foundational concepts.
Core Principles of Incident Management
- Analyzing threats, vulnerabilities, and associated risks.
- Categorizing and classifying security incidents.
- Understanding the distinct stages of the incident lifecycle.
Establishing an Incident Management Program
- Setting clear scopes and strategic objectives.
- Assigning roles, defining responsibilities, and mapping escalation routes.
- Drafting incident response policies and operational procedures.
Detecting and Reporting Incidents
- Identifying indicators of compromise and early warning signals.
- Utilizing internal and external reporting mechanisms.
- Maintaining accurate incident logs and documentation.
Analyzing and Evaluating Incidents
- Collecting and safeguarding digital evidence.
- Applying root cause analysis methodologies.
- Conducting impact assessments and risk evaluations.
Responding, Containing, and Recovering from Incidents
- Implementing containment strategies and managing communications.
- Eliminating threats and addressing underlying vulnerabilities.
- Restoring systems and validating their integrity.
Post-Incident Review and Continuous Improvement
- Finalizing incident reports and documentation.
- Extracting lessons learned and implementing corrective actions.
- Incorporating improvements into the broader ISMS framework.
Conclusion and Future Directions
Requirements
- Solid understanding of information security management concepts.
- Awareness of ISO/IEC 27001 or equivalent standards.
- Practical experience in IT security or incident response positions.
Target Audience
- Information security officers and management staff.
- Leaders of incident response teams.
- Professionals specializing in risk and compliance.
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
