ISO - 27035 Lead Incident Manager - Information Security Incident Management

Curriculum

Introduction, incident management framework according to ISO/IEC 27035

• Concepts and definitions related to information security and incident management
• Incident management standards, and best practices
• Choosing an incident management framework
• Understanding an organisation and its context

Planning the implementation of an Organisational Incident Management Process based on ISO/IEC 27035

• Incident management strategy and project management
• Planning the implementation of an effective incident management process
• Preliminary analysis and selection of an approach and methodology
• Design and document an incident detection, reporting and management process
• Defining roles and responsibilities in the context of the implementation and management of an Incident Management Process

Implementing an Incident Management Process

• Define the document and record management processes
• Incident Management policies & procedures
• Implementation of security processes and controls related to incident management
• Change management process
• Incident analysis processes
• Effective communication and the communication strategies
• Establish the Information Security Incident Response Team

Monitoring, measuring and improving an Incident Management Process

• Monitoring and evaluating the effectiveness of incident management process in operations
• Development of metrics, performance indicators and dashboards
• Management reviews
• Implementation of a continual improvement program
• Develop and propose the best corrective and preventive action plans