ISO-IEC 27035 Information Security Incident Management Training by Tonex
The ISO/IEC 27035 Information Security Incident Management Training by Tonex is a comprehensive course that provides participants with the knowledge and skills they need to effectively manage information security incidents. The course covers the five key stages of the ISO 27035 incident response standards:
- Plan and Prepare: This stage involves formulating and documenting information security management policies and obtaining commitment on top management.
- Detect and Report: This stage involves identifying and reporting information security incidents.
- Assess and Decide: This stage involves assessing the severity of the incident and making decisions about how it is to be addressed.
- Respond:This stage involves taking steps to contain the incident, restore operations, and gather evidence.
- Learn Lessons: This stage involves reviewing the incident and identifying areas for improvement.
Who Should Attend?
The course is designed for a wide range of professionals who are involved in the management of information security incidents, including:
- Information security managers who are responsible for developing and implementing incident management plans.
- Information security analysts who are responsible for investigating and responding to incidents.
- IT professionals who are responsible for the day-to-day operation of information systems.
- Business managers who need to understand the importance of incident management and how it can protect their organization.
Learning Objectives:
By the end of the training, you will be able to:
- Understand the importance of information security incident management
- Apply the principles and processes of incident management
- Develop and implement an incident management plan
- Detect, report, assess, and respond to information security incidents
- Collect and preserve evidence from incidents
- Communicate with stakeholders during an incident
- Learn from incidents and improve your incident management process
Course Outlines:
Introduction to ISO/IEC 27035
- What is ISO/IEC 27035?
- Why is information security incident management important?
- The five key stages of ISO/IEC 27035
Plan and Prepare
- Formulating and documenting information security management policies
- Obtaining commitment from top management
- Establishing an incident management team
- Developing an incident management plan
- Communicating with stakeholders
Detect and Report
- Identifying and detecting incidents
- Reporting incidents
Assess and Decide
- Assessing the impact of incidents
- Deciding on the appropriate response