Course Outline
Introduction to the ISO/IEC 27035 Framework
- Survey of the components and structure of ISO/IEC 27035 parts
- Interdependencies with ISO/IEC 27001 and other industry standards
- Essential terminology, definitions, and foundational concepts
Core Principles of Incident Management
- Analyzing threats, vulnerabilities, and associated risks
- Categorizing and classifying security incidents
- Mapping the stages of the incident lifecycle
Strategic Planning for an Incident Management Program
- Establishing the scope and primary objectives
- Defining roles, responsibilities, and escalation protocols
- Creating incident response policies and procedural guidelines
Identifying and Reporting Incidents
- Recognizing indicators of compromise and early warning signals
- Utilizing internal and external reporting mechanisms
- Maintaining accurate incident logs and documentation
Analyzing and Evaluating Incidents
- Collecting and preserving digital evidence
- Applying root cause analysis methodologies
- Conducting impact assessments and risk evaluations
Responding, Containing, and Recovering
- Deploying containment strategies and managing communications
- Eradicating identified threats and vulnerabilities
- Executing system recovery and validation processes
Post-Incident Actions and Continuous Improvement
- Compiling incident reports and final documentation
- Extracting lessons learned and implementing corrective measures
- Incorporating enhancements into the broader ISMS
Summary and Future Directions
Requirements
- Foundational understanding of information security management principles
- Proficiency with ISO/IEC 27001 or comparable standards
- Practical experience in IT security or incident response roles
Target Audience
- Information security officers and managerial staff
- Heads of incident response teams
- Risk management and compliance specialists
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
Dana Foster - Corrigan Oil Company
Course - ISO 9001 Foundation
Speed of response and communication
