PECB CourseInformation SecurityAdvancedISO/IEC 27035ISO/IEC 27035 Lead Incident Manager
Lead information security incident management programs based on ISO/IEC 27035 and develop organizational incident response capabilities.
Course Description
The ISO/IEC 27035 Lead Incident Manager training course enables you to acquire the expertise to lead and manage an information security incident management program based on ISO/IEC 27035. You will develop the ability to establish, implement, maintain, and continually improve an incident management capability, including incident response team formation, incident handling procedures, and coordination with internal and external stakeholders. The course includes practical exercises based on real-world security incident scenarios.
Who Should Attend
- Incident response managers and team leads
- SOC managers and security operations leads
- CISOs responsible for incident management programs
- Information security consultants specializing in incident response
Learning Objectives
- 1Establish and lead an information security incident management program
- 2Implement incident detection, reporting, and analysis capabilities
- 3Develop incident response playbooks, procedures, and escalation paths
- 4Lead incident response teams and coordinate with stakeholders
- 5Manage post-incident review, lessons learned, and continual improvement
Prerequisites
- A fundamental understanding of ISO/IEC 27035 and information security incident management
- Knowledge of information security concepts and frameworks
Course Modules
Day 1: Introduction to ISO/IEC 27035 and Incident Management Program
Normative and regulatory framework; ISO/IEC 27035 series overview; incident management policy and program design; team structure and roles (CSIRT/CERT); and organizational context.
Day 2: Incident Detection, Reporting, and Assessment
Building detection capabilities; monitoring and alerting systems; incident reporting procedures; incident assessment and categorization; severity classification; and threat intelligence integration.
Day 3: Incident Response Operations and Handling
Response procedures and playbooks; containment strategies; eradication and recovery; evidence preservation for forensics; and managing concurrent incidents.
Day 4: Incident Communication, Review, and Improvement
Internal and external communication protocols; stakeholder and regulatory notification; post-incident review methodology; metrics and KPIs; and continual improvement of the incident management program.
Day 5: Certification Exam
Review of key concepts and the PECB Certified ISO/IEC 27035 Lead Incident Manager certification examination.
Exam Details
Duration
3 hours
Format
Multiple choice (80 questions), open book
Passing Score
70%
Retake Policy
Free retake within 12 months after first failure
Available in:
Certification
PECB Certified ISO/IEC 27035 Lead Incident Manager
Issued by PECB
Digital Badge & Verification
Verified via Credly
Upon passing the exam, your certificate will be issued as a digital badge via Credly. This badge can be shared on LinkedIn, embedded in your email signature, and verified by anyone at any time.
Share this course
Related Courses
Continue your learning journey with these related courses.
ISO/IEC 27001 Foundation
Information Security
Learn the basic elements to implement and manage an Information Security Management System as specified in ISO/IEC 27001.
ISO/IEC 27001 Lead Implementer
Information Security
Lead the implementation of ISO/IEC 27001:2022 ISMS with expert knowledge in planning, risk assessment, control implementation, and certification audit preparation.
ISO/IEC 27001 Lead Auditor
Information Security
Develop the competence to audit an ISMS and manage audit teams by applying widely recognized audit principles, procedures, and techniques per ISO 19011.