ISO/IEC 27035 Lead Incident Manager

Audience
The course is aimed at people with responsibility for or interest in information security and incident management. It is suitable for IT and security officers, risk managers, security consultants, incident response team members, compliance officers, internal auditors, managers or advisors who want to establish or lead their organization's incident management process.

Learning objectives
Participants will acquire in-depth knowledge of the principles, methods and processes of incident management in line with the ISO/IEC 27035 standard. They will learn how to plan, design and implement an incident response policy and associated processes, including registration, detection, reporting, analysis, response, recovery and post-incident evaluation. They will also learn how to set up and lead an incident response team (IRT), how to communicate internally and externally at events, and how to monitor, measure and continuously improve the incident management process.

After completing the course you will be able to

• Explain basic principles and concepts of information security incident management according to ISO/IEC 27035
• Plan and document an event management process with policies, procedures, and roles
• Establish and lead an incident response team (IRT) tailored to the needs of the organization
• Conduct detection, reporting, assessment and response to information security incidents
• Perform post-incident analysis, identify lessons learned, and implement corrective/preventive actions
• Monitor, measure and continuously improve your organization's event management program