Our accelerated courses are available online
Join Now!

ISO - 27035 Lead Incident Manager



Only 3 Days



Classroom / Online / Hybrid

Next date

Next date:

1.11.2021 (Monday)


Accelerated ISO training, ISO course and ISO certification

Master a model for implementing an incident management process throughout your organisation - using the ISO/IEC 27035 standard - in just 3 days.

You’ll study practical exercises as you get the knowledge you need to manage information security incidents quickly. You’ll also learn:

  • Incident management standards and best practices
  • Effective security incident management using ISO/IEC 27035
  • Change management and incident analysis processes
  • How to establish an Information Security Incident Response Team

Get immersed in ISO/IEC 27035 in a distraction-free environment and learn faster with Firebrand’s Lecture | Lab | Review methodology.

You’ll sit the PECB Certified ISO/IEC 27035 Lead Incident Manager exam as part of your accelerated course. This exam is covered by your Certification Guarantee.

If you’re responsible for information and security or conformity in your organisation, this 3-day course is ideal for you. This course is also beneficial for:

  • Incident managers
  • Business Process Owners
  • Information Security Risk Managers
  • Regulatory Compliance Managers
  • Members of Incident Response Team
  • Persons responsible for information security or conformity within an organisation

This accelerated training is fully compatible with ISO/IEC 27035 which supports ISO 27001 by providing guidance for incident management.

Four reasons why you should sit your course with Firebrand Training

  1. You'll be trained and certified faster. Learn more on this 3-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 107230 students saving more than one million hours since 2001


Benefits of Training with Firebrand

  • Two options of training - Residential classroom-based, or online courses
  • A purpose-built training centre – get access to dedicated Pearson VUE Select facilities.
  • Certification Guarantee – pass first time or train again free (just pay for accommodation, exams and incidental costs)
  • Everything you need to certify – you’ll sit your exam at the earliest available opportunity after the course - either immediately after your classroom course, or as soon as there are slots available, if you've taken it online
  • No hidden extras – one cost covers everything you need to certify


Introduction, incident management framework according to ISO/IEC 27035

  • Concepts and definitions related to information security and incident management
  • Incident management standards, and best practices
  • Choosing an incident management framework
  • Understanding an organisation and its context

Planning the implementation of an Organisational Incident Management Process based on ISO/IEC 27035

  • Incident management strategy and project management
  • Planning the implementation of an effective incident management process
  • Preliminary analysis and selection of an approach and methodology
  • Design and document an incident detection, reporting and management process
  • Defining roles and responsibilities in the context of the implementation and management of an Incident Management Process

Implementing an Incident Management Process

  • Define the document and record management processes
  • Incident Management policies & procedures
  • Implementation of security processes and controls related to incident management
  • Change management process
  • Incident analysis processes
  • Effective communication and the communication strategies
  • Establish the Information Security Incident Response Team

Monitoring, measuring and improving an Incident Management Process

  • Monitoring and evaluating the effectiveness of incident management process in operations
  • Development of metrics, performance indicators and dashboards
  • Management reviews
  • Implementation of a continual improvement program
  • Develop and propose the best corrective and preventive action plans

Exam Track

As part of your accelerated course, you'll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

PECB Certified ISO/IEC 27035 Lead Incident Manager exam

  • Format: Open book
  • Duration: 3 hours
  • Passing score: 70%
  • Domains:
    • Domain 1: Fundamental principles and concepts in Incident Management
    • Domain 2: Incident Management Best Practice based on ISO 27035
    • Domain 3: Designing and Developing an Organisational Incident Management Process based on ISO 27035
    • Domain 4: Preparing for Incident Management and implementing an Incident Management Process
    • Domain 5: Enacting the Incident Management Process and handling Security Incidents
    • Domain 6: Performance Monitoring and Measuring
    • Domain 7: Improving the Incident Management Process

What's Included

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Doesn't apply for online courses
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free (just pay for accommodation, exams and incidental costs)


Before attending this accelerated course, you should have:

  • An understanding of ISO/IEC 27035
  • Comprehensive knowledge of Information Security

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.


Here's the Firebrand Training review section. Since 2001 we've trained exactly 107230 students and asked them all to review our Accelerated Learning. Currently, 96.66% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

"Global approved ISO Standards are a great way to provide a baseline of understanding Incident management workings and the need to provide next level of security Incident Management"
Anonymous, Sandvik (28.10.2019 (Monday) to 30.10.2019 (Wednesday))

"Firebrand gave me the chance to deep dive into topic."
Anonymous (28.10.2019 (Monday) to 30.10.2019 (Wednesday))

"The training was interesting."
Anonymous (21.10.2019 (Monday) to 23.10.2019 (Wednesday))

"I really enjoyed participating and having selected Firebrand for my ISO22301La training. Firebrand provides a full service all inklusive training withhotel, food, drinks and training which helped me to focus on the course material. Thank you Firebrand!"
Anonymous, SAP (22.10.2018 (Monday) to 24.10.2018 (Wednesday))

"Intense course and a lot of information covered. Pace was good and examples made the course interesting to listen to."
Anonymous (20.3.2017 (Monday) to 22.3.2017 (Wednesday))

Course Dates

ISO - 27035 Lead Incident Manager - Incident Management




Book now

1.11.2021 (Monday)

3.11.2021 (Wednesday)


Book now

25.4.2022 (Monday)

27.4.2022 (Wednesday)


Book now

Latest Reviews from our students