Course Outline
Introduction to ISO/IEC 27035
- An overview of the ISO/IEC 27035 parts and structural framework.
- The relationship between ISO/IEC 27035 and ISO/IEC 27001, as well as other relevant standards.
- Essential terminology, definitions, and core concepts.
Incident Management Principles
- Analyzing threats, vulnerabilities, and associated risks.
- Categorizing and classifying security incidents.
- Examining the stages of the incident lifecycle.
Planning an Incident Management Program
- Establishing scope and strategic objectives.
- Defining roles, responsibilities, and escalation procedures.
- Drafting incident response policies and operational procedures.
Incident Detection and Reporting
- Identifying indicators of compromise and early warning signals.
- Setting up internal and external reporting channels.
- Maintaining accurate incident logs and records.
Incident Analysis and Evaluation
- Collecting and preserving forensic evidence.
- Applying root cause analysis techniques.
- Conducting impact assessments and risk evaluations.
Incident Response, Containment, and Recovery
- Implementing containment strategies and managing communications.
- Eradicating threats and remediating vulnerabilities.
- Executing system recovery and validation protocols.
Post-Incident Activities and Continual Improvement
- Compiling incident reports and documentation.
- Extracting lessons learned and defining corrective actions.
- Integrating derived improvements into the ISMS.
Summary and Next Steps
Requirements
- A solid understanding of information security management concepts.
- Proficiency with ISO/IEC 27001 or related standards.
- Practical experience in IT security or incident response roles.
Target Audience
- Information security officers and managers.
- Incident response team leaders.
- Risk and compliance professionals.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 8000 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
