Ongoing Management of Security Incidents
ISO/IEC 27035 + NIST SP 800-61
Strengthens the capacity of your organization to prevent, detect and respond to incidents of information security by applying recognized international standards.
This course provides methodologies, tools and best practices needed to design, implement, and improve processes effective response to incidents, aligned with ISO/IEC 27035:2023 and NIST SP 800-61.
Participants will learn how to manage the entire life cycle of an incidentfrom preparation and detection to recovery, and continuous improvement, strengthening the resilience of the organization against cyber threats.
Why choose this course?
In IQ Information Quality we support organisations in strengthening their capabilities cybersecurity, risk management and compliance with international standards.
Our training programs are designed to provide practical knowledge, up to date and applicable, allowing professionals to implement security best practices in their organizations.
✔ Learn how to manage security incidents with international standards
✔ Strengthens the ability to respond to cyber attacks
✔ Implements processes aligned with ISO 27035, and NIST 800-61
✔ Get professional certification specialist
✔ Develops practical skills applicable in SOC, CSIRT and teams of cybersecurity
Objectives of the Course
Train participants in the design, implementation and improvement of the process of incident management information securityaccording to the best international practices defined by:
- ISO/IEC 27035 (parts 1 to 4)
- NIST SP 800-61 revision 3
At the end of the course, participants will be able to structure, operate and improve a process effective response to incidents within their organizations.
Who is it aimed at?
This course is aimed at professionals responsible for the information security and incident managementsuch as:
- CISO and responsible for Information security
- Analysts and specialists in Cybersecurity
- Teams SOC and CSIRT
- Professionals risk management and compliance
- Auditors information security
- Responsible for business continuity
- Consultants government IT security and
Manages security incidents effectively
Course content
The course covers the major components of the process of incident management:
- Fundamentals and regulatory framework
- ISO/IEC 27035 and NIST SP 800-61
- Principles of incident management
- Preparation of organizational
- Policies and procedures
- Roles and responsibilities
- Response capabilities
- Detection and notification
- Identification of incidents
- Log and report
- Evaluation and analysis
- Classification of incidents
- Impact assessment
- Prioritization
- Incident response
- Containment
- Eradication
- Recovery
- Closing the incident
- Documentation
- Lessons learned
- Continuous improvement
- Coordination and escalation
- Crisis management
- Communication with stakeholders
- Final evaluation
What you'll learn
At the end of the course you will be able to:
- To understand the full cycle management of security incidents
- To detect, analyze and respond to incidents in a structured way
- Design plans in response to incidents
- Implement processes aligned with ISO 27035, and NIST 800-61
- To improve the capacities of detection, containment and recovery
- Strengthen the resilience organizational against cyber attacks.
Methodology
The course combines training concept with hands-on learning to facilitate the implementation in real-world environments.
Distribution of learning
- 60% theoretical content
- 40% hands-on workshops
During the course examines real cases and experiences of organizational, allowing the participants to understand how to apply these methodologies in real-world scenarios of security.
Duration
24 hours of training
Mode:
- Virtual live (synchronous)
- Possibility of face-to-face for companies
The dates are coordinated according to the availability of the participants.
Analyzes and responds to incidents of information security
Certification
Participants who comply with the requirements of the course you will be able to obtain certification in management of incidents of information security aligned with international standards.
International certification ACKD
The participants will be able to opt for the certification:
Lead Incident Response Manager
ISO/IEC 27035:2023 + NIST SP 800-61r3
This certification includes international registration before ERCA (European Register of Certificated Auditors) and a personal registration number, which validates the professional skills on management of incidents of information security.
To opt out of this certification, the participant shall:
- Attend the 90% of the sessions
- Complete workshops and case study
- To approve the final exam
- Have at least two (2) years of professional experience demonstrable in incident management or related areas.
National certification – RANGE Consulting
As an alternative, participants will be able to opt for the national certification issued by RANGE Consultingpartner academic training program.
This certification includes:
- 24 hours of training
- Access to the same academic content
- Practical workshops
- Final evaluation
- Certificate of approval issued by RANGE Consulting
This mode is suitable for professionals who want to strengthen your skills in incident management, information security, without requiring accreditation international.
Delivery of certificates
- The diploma course is delivered approximately three weeks after the exam.
- International certificate ACKD can take up to six weeks to be issued.