Course Outline
Introduction to ISO/IEC 27035
- Overview of the parts and structure of ISO/IEC 27035
- Interplay with ISO/IEC 27001 and other relevant standards
- Essential terminology, definitions, and core concepts
Principles of Incident Management
- An understanding of threats, vulnerabilities, and risks
- Categorization and classification of incidents
- Stages of the incident lifecycle
Planning an Incident Management Program
- Establishing scope and defining objectives
- Defining roles, responsibilities, and escalation paths
- Formulating incident response policies and procedures
Detection and Reporting of Incidents
- Identifying indicators of compromise and early warning signs
- Utilizing internal and external reporting channels
- Maintaining accurate incident logs and records
Analysis and Evaluation of Incidents
- Evidence collection and preservation methods
- Techniques for root cause analysis
- Conducting impact assessments and risk evaluations
Response, Containment, and Recovery
- Strategies for containment and communication
- Eradicating threats and mitigating vulnerabilities
- System restoration and validation processes
Post-Incident Activities and Continuous Improvement
- Reporting and documenting incident outcomes
- Extracting lessons learned and implementing corrective actions
- Incorporating improvements into the ISMS
Conclusion and Future Directions
Requirements
- Foundational knowledge of information security management concepts
- Familiarity with ISO/IEC 27001 or equivalent standards
- Practical experience in IT security or incident response roles
Target Audience
- Information security officers and managers
- Leaders of incident response teams
- Risk and compliance specialists
Testimonials (5)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
The quizzes to reinforce the reading and the ability to ask questions at any time
Jonathan
Course - ISO 9001 Lead Auditor
Speed of response and communication
