I. Overview:

The ISO/IEC 27035 Lead Incident Manager training course equips participants with the knowledge and skills necessary to support organizations in establishing and implementing a process for managing information security incidents. This training course is based on the ISO/IEC 27035 series and other good practices of incident management and covers the entire incident lifecycle, from incident planning to post-incident activities. In addition, participants will also learn about the role of key stakeholders and the importance of working with other organizations to handle information security incidents.

II. Duration: 05 days (40 hours)

III. Objectives:

By the end of this training course, you will be able to:

• Explain the fundamental principles of incident management
• Develop and implement effective incident response plans tailored to the organization's needs and select an incident response team
• Conduct thorough risk assessments to identify potential threats and vulnerabilities within an organization
• Apply good practices from various international standards to enhance the efficiency and effectiveness of incident response efforts
• Conduct post-incident analysis and identify lessons learned

IV. Intended Audience:

This training course is intended for:

• Managers or consultants seeking to expand their knowledge of information security incident management
• Professionals seeking to establish and manage effective incident response teams (IRTs)
• IT professionals and information security risk managers seeking to enhance their knowledge in information security incident management
• Members of incident response teams
• Incident response coordinators or other roles with responsibilities for incident handling and response

V. Prerequisites:

• The main requirement for participating in this training course is having a general knowledge of incident management processes, information security principles, and the ISO/IEC 27000 family of standards.

VI. Course outlines:

• Day 1: Introduction to information security incident management concepts and ISO/IEC 27035
• Day 2: Designing and preparing an information security incident management plan
• Day 3: Detecting and reporting information security incidents
• Day 4: Monitoring and continual improvement of the information security incident management process
• Day 5: Certification exam