Course Outline
Introduction to ISO/IEC 27035 for Government
- Overview of ISO/IEC 27035 parts and structure
- Relationship with ISO/IEC 27001 and other relevant standards
- Key terms, definitions, and foundational concepts
Incident Management Principles for Government
- Understanding threats, vulnerabilities, and associated risks
- Categories of incidents and their classification
- Stages in the incident lifecycle
Planning an Incident Management Program for Government
- Defining the scope and objectives of the program
- Clarifying roles, responsibilities, and escalation pathways
- Developing policies and procedures for incident response
Incident Detection and Reporting for Government
- Identifying indicators of compromise and early warning signs
- Establishing internal and external reporting channels
- Maintaining comprehensive logs and records of incidents
Incident Analysis and Evaluation for Government
- Gathering and preserving evidence in a secure manner
- Applying root cause analysis techniques
- Conducting impact assessments and risk evaluations
Incident Response, Containment, and Recovery for Government
- Implementing containment strategies and effective communication
- Eradicating threats and addressing vulnerabilities
- Recovering systems and validating their integrity
Post-Incident Activities and Continual Improvement for Government
- Documenting incident reports and maintaining thorough documentation
- Identifying lessons learned and implementing corrective actions
- Integrating improvements into the Information Security Management System (ISMS)
Summary and Next Steps for Government
Requirements
- Understanding of information security management principles
- Familiarity with ISO/IEC 27001 or similar standards
- Experience in IT security or incident response positions
Audience for Government
- Information security officers and managers
- Incident response team leaders
- Risk and compliance professionals
Testimonials (3)
The focus on the objective, always asking for doubts and open to help .
VICTOR ALEJANDRO RUBIO PADILLA - GDL Circuits
Course - ISO 26262 Automotive Functional Safety
Speed of response and communication
Bader Bin rubayan - Lean Business Services
Course - ISO/IEC 27001 Lead Implementer
Dereck's overall preparedness . Dereck has great communications' skills !!