ISO/IEC 27035 Foundation Course Overview:

ISO/IEC 27035 Foundation training equips participants with the essential knowledge to implement an Incident Management Plan and effectively handle Information Security Incidents. The course covers Information Security Incident Management processes in detail. Upon completion, participants can take the exam and apply for the “PECB Certificate Holder in ISO/IEC 27035 Foundation” certificate, demonstrating their understanding of fundamental methodologies, requirements, and management approach related to Information Security Incident Management.

Intended Audience:

• Individuals interested in Information Security Incident Management process approaches
• Individuals seeking to gain knowledge about the main principles and concepts of Information Security Incident Management
• Individuals interested to pursue a career in Information Security Incident Management 

Learning Objectives of ISO/IEC 27035 Foundation:

• Introduction to Information Security Incident Management: Develop a foundational understanding of the importance of information security incident management in protecting organizational assets.
• Overview of ISO/IEC 27035 Standard: Familiarize yourself with the structure, scope, and key components of the ISO/IEC 27035 standard, which provides guidance on information security incident management.
• Incident Management Concepts: Gain insights into the fundamental concepts and principles of incident management, covering incident identification, assessment, response, and recovery.
• Roles and Responsibilities in Incident Management: Understand the roles and responsibilities of key stakeholders involved in incident management, including incident responders and management.
• Incident Identification and Classification: Learn about techniques for the identification and classification of information security incidents, ensuring a timely and appropriate response.
• Communication and Coordination: Explore fundamental communication and coordination strategies for managing information security incidents, both within the organization and with external entities.
• Incident Response Planning Overview: Understand the basics of incident response planning, including the establishment of procedures, roles, and communication channels.
• Incident Assessment Overview: Gain an overview of methods for assessing information security incidents based on their severity and potential impact.
• Legal and Ethical Considerations in Incident Management: Introduce the legal and ethical considerations in incident management, emphasizing compliance with laws and ethical practices.
• Continuous Improvement Awareness: Develop an awareness of the principle of continual improvement in incident management, encouraging regular reviews and enhancements of processes.
• Documentation Awareness: Learn about the basic documentation requirements for incident management processes, ensuring transparency, traceability, and compliance with ISO/IEC 27035.
• Incident Reporting Overview: Understand the importance of incident reporting, ensuring that relevant stakeholders are informed appropriately.