PECB Certified Course: ISO/IEC 27035 Lead Incident Manager

Design, operate and improve an information security incident-management capability.

This advanced course develops the ability to design and manage an information security incident-management process based on ISO/IEC 27035. It follows incident readiness from governance and response-team preparation through detection, assessment, reporting and response, then addresses monitoring, post-incident analysis, lessons learned and continual improvement.

Course at a glance

• Provider and awarding body: PECB.
• Learning format: PECB Self-Study (official course materials).
• Language: English.
• Level: Lead Manager.
• Examination and certification-application cycle: 12 months from purchase for the first examination attempt, the included free retake if needed, and the certification application.

What this course includes

• More than 450 pages of official PECB instructional materials containing explanations, guidance and practical examples.
• The first examination attempt and one free retake.
• The certification-application fee and the first year of the Annual Maintenance Fee, where applicable.
• A course-completion attestation worth 31 CPD credits, separate from the PECB professional credential.

What you will learn

After completing the course, the learner should be able to:

• explain fundamental incident-management principles;
• develop an incident-response plan and define an appropriate response team;
• support detection, assessment, reporting and response activities;
• conduct post-incident analysis and improve the incident-management process.

Who this course is for

• Managers and consultants expanding their incident-management capability.
• Professionals establishing or managing incident response teams.
• IT and information security risk professionals.
• Incident response team members and incident coordinators.

Prerequisites: PECB expects general knowledge of incident-management processes, information security principles and the ISO/IEC 27000 family of standards.

Course outline

• Introduction to information security incident management concepts and ISO/IEC 27035
• Designing and preparing an information security incident management plan
• Detecting and reporting information security incidents
• Monitoring and continual improvement of the information security incident management process
• Certification exam

Exam and credential pathway

The exam covers incident-management principles, process design, response-plan preparation and execution, managing incidents, and improving incident-management activities.

Passing the examination enables an application to the applicable PECB ISO/IEC 27035 Incident Manager designation. Higher designations require the specified professional and incident-management experience, in addition to application and ethics requirements.

Course completion, examination success, certification application and credential issuance are separate stages; the credential is not issued automatically.

For official course details, see the PECB ISO/IEC 27035 Lead Incident Manager page.

Access and activation

The 12-month period for the first examination, included free retake and certification application begins on the purchase date.

Each order covers one learner. Wadi Solutions begins processing the PECB registration within one business day, and activation details are sent to the learner's email. Required enrolment details are shared with PECB for activation.

Continue your learning path

• ISO/IEC 27035 Foundation

Explore ISO/IEC 27035 — Security incident management courses to see the available options.

Before you buy

• If you do not have a myPECB account, create one here.
• If your myPECB email differs from the email used for your Wadi Solutions order, add your myPECB email to the order notes.