ISO/IEC 27035 Foundation

Audience
The course is suitable for people who want a basic understanding of information security incidents and how they are handled within an organisation. It is relevant for IT staff, security officers, support staff, managers, advisors, project staff and others working with information security, risk management or operations and who are to contribute to the prevention, detection and management of security incidents.

Learning objectives
Participants will learn basic concepts, principles and processes in event management based on ISO IEC 27035. They will understand the structure of an event management program and how organizations can work systematically to detect, record, assess, manage and follow up events. The course provides insight into roles and responsibilities, communication, documentation, analysis and improvement of incident management as part of a holistic management system for information security.

After completing the course you will be able to

• Explain basic principles, concepts and terminology in event management in accordance with ISO IEC 27035
• Explain the main steps in the event management process from detection to incident analysis
• Understand the roles, responsibilities, and structures included in an event management program
• Contribute to recording, assessing and managing information security incidents
• Support improvement of safety procedures through lessons learned from incidents