CREST - Certified Incident Manager | CCIM

Duration

Duration:

Only 4 Days

Method

Method:

Classroom / Online / Hybrid

Next date

Next date:

10.2.2025 (Monday)

Overview

On this 4-day accelerated Firebrand course for CREST's Certified Incident Manager (CCIM) exam, you'll learn to determine the path of investigation to be taken in response to a cyber breach. You'll make use of real world experience and the information available to continuously re-evaluate the situation and manage the direction of investigation.

Achieving the Incident Manager certification validates your ability to lead and present all elements of the Incident Response project lifecycle including identification, containment and eradication.

Some of the skills you'll develop and eventually be tested on includes:

  • Client management
  • Containment techniques
  • Project management and time management
  • Evidence handling
  • Threat intelligence, contextualisation attribution and motivation
  • Risk analysis
  • Attack and compromise lifecycle
  • Technical vulnerability root cause identification

Firebrand make use of a unique Lecture | Lab | Review technique. This approach combines both theoretical knowledge with hands-on practical skills. This means you'll learn faster and develop the real-world experience necessary to apply your skills when you return to work.

On this course, you'll be prepared for and sit the CREST Certified Incident Manager (CCIM) examination on day 4. This is covered by your Certification Guarantee.

An Incident Manager's role is expected to be fulfilled by highly experienced personnel that has spent a considerable amount of time working on incident response engagement. You should also have strong and broad technical skills in order to play a key part in understanding the details of a cyber incident.

Four reasons why you should sit your course with Firebrand Training

  1. You'll be trained and certified faster. Learn more on this 4-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 134561 students saving more than one million hours since 2001

Benefits

Seven reasons why you should sit your course with Firebrand Training

  1. Two options of training. Choose between residential classroom-based, or online courses
  2. You'll be certified fast. With us, you’ll be trained in record time
  3. Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
  4. Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
  5. You’ll learn more. A day with a traditional training provider generally runs from 9 am – 5 pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day of quality learning time, with your instructor
  6. You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
  7. You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals
  • * For residential training only. Doesn't apply for online courses
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts

Curriculum

Throughout this course, you'll cover the following material:

  • Client management
  • Containment techniques
  • Project management and time management
  • Evidence handling
  • Communications
  • Recovery and remediation
  • On-going technical prevention
  • Judgement making and critical reasoning
  • Written skills
  • Third Parties
  • Reporting Agencies
  • Threat intelligence, Contextualisation Attribution and Motivation
  • Industry Best Practice
  • Risk Analysis
  • Attack and compromise lifecycle
  • Legal and Jurisdictional Issues
  • Ethics
  • Technical vulnerability root cause identification
  • Physical threats
  • Insider attacks

Exam Track

On day 4 of this accelerated course, you'll sit the following exams at the Firebrand Training centre, covered by your Certification Guarantee:

Incident Manager Part 1

  • Duration: 3 hours
  • Number of questions: 150
  • Format: Multiple choice and 1 written response

Incident Manager Part 2

  • Duration: 4 hours
  • Number of questions: 3
  • Format: Written responses

What's Included

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Prerequisites

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.

Reviews

Here's the Firebrand Training review section. Since 2001 we've trained exactly 134561 students and asked them all to review our Accelerated Learning. Currently, 94.65% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.


"Great to learn with a motivated and fun instructor who genuinely wants you to succeed. The training environment and those you are learning with was motivating and promoted positive engagement and interaction. In summary, an excellent course and teach method."
JC. (18.9.2023 (Monday) to 21.9.2023 (Thursday))

"Firebrand had good communication before the course began, the instructor was knowledgeable and credible, and covered many aspects of both CTI and management, in good detail."
Anonymous. (18.9.2023 (Monday) to 21.9.2023 (Thursday))

"Thanks to our instructor, I really enjoyed the course, materials was explained and taught well. He has a deep knowledge of Cyber Security and I’m looking forward to sitting my exam!"
Toju Nanna, Proact IT. (8.8.2023 (Tuesday) to 11.8.2023 (Friday))

"Instructor was patient, explained well, interactive"
RW. (1.8.2023 (Tuesday) to 4.8.2023 (Friday))

"The instructor was very knowledgeable and able to answer questions proficiently. In regards to practical application of threat intelligence, the instructor provided useful recommendations"
Anonymous (1.8.2023 (Tuesday) to 4.8.2023 (Friday))

Course Dates

Start

Finish

Status

Location

Book now

26.8.2024 (Monday)

29.8.2024 (Thursday)

Finished - Leave feedback

-

 

 

10.2.2025 (Monday)

13.2.2025 (Thursday)

Limited availability

Nationwide

 

24.3.2025 (Monday)

27.3.2025 (Thursday)

Open

Nationwide

 

5.5.2025 (Monday)

8.5.2025 (Thursday)

Open

Nationwide

 

16.6.2025 (Monday)

19.6.2025 (Thursday)

Open

Nationwide

 

Latest Reviews from our students