Course Outline
Introduction to ISO/IEC 27035
- Overview of the various parts and structure of ISO/IEC 27035.
- The interplay between ISO/IEC 27001 and other relevant standards.
- Essential terms, definitions, and foundational concepts.
Incident Management Principles
- Understanding the landscape of threats, vulnerabilities, and risks.
- Categorizing and classifying security incidents.
- The stages of the incident lifecycle.
Planning an Incident Management Program
- Defining the scope and strategic objectives.
- Establishing roles, responsibilities, and escalation paths.
- Formulating incident response policies and standard procedures.
Incident Detection and Reporting
- Identifying indicators of compromise and early warning signals.
- Utilizing internal and external reporting channels effectively.
- Maintaining accurate incident logs and records.
Incident Analysis and Evaluation
- Collecting and preserving digital evidence.
- Applying root cause analysis techniques.
- Conducting impact assessments and risk evaluations.
Incident Response, Containment, and Recovery
- Implementing containment strategies and managing communications.
- Eradicating threats and resolving vulnerabilities.
- Executing system recovery and validation procedures.
Post-Incident Activities and Continual Improvement
- Compiling incident reports and documentation.
- Extracting lessons learned and defining corrective actions.
- Integrating enhancements into the ISMS.
Summary and Next Steps
Requirements
- Foundational knowledge of information security management concepts.
- Familiarity with ISO/IEC 27001 or comparable standards.
- Practical experience in IT security or incident response roles.
Target Audience
- Information security officers and managers.
- Incident response team leaders.
- Risk and compliance professionals.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 8000 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
