Course Outline
Introduction to ISO/IEC 27035
- Overview of ISO/IEC 27035 parts and structure
- Relationship with ISO/IEC 27001 and other standards
- Key terms, definitions, and concepts
Incident Management Principles
- Understanding threats, vulnerabilities, and risks
- Incident categories and classification
- Incident lifecycle stages
Planning an Incident Management Program
- Defining scope and objectives
- Roles, responsibilities, and escalation paths
- Incident response policy and procedures
Incident Detection and Reporting
- Indicators of compromise and early warning signs
- Internal and external reporting channels
- Maintaining incident logs and records
Incident Analysis and Evaluation
- Gathering and preserving evidence
- Root cause analysis techniques
- Impact assessment and risk evaluation
Incident Response, Containment, and Recovery
- Containment strategies and communication
- Eradication of threats and vulnerabilities
- System recovery and validation
Post-Incident Activities and Continual Improvement
- Incident reporting and documentation
- Lessons learned and corrective actions
- Integrating improvements into the ISMS
Summary and Next Steps
Requirements
- Knowledge of information security management concepts
- Familiarity with ISO/IEC 27001 or related standards
- Experience in IT security or incident response roles
Audience
- Information security officers and managers
- Incident response team leaders
- Risk and compliance professionals
Testimonials (5)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
The quizzes to reinforce the reading and the ability to ask questions at any time
Jonathan
Course - ISO 9001 Lead Auditor
Speed of response and communication