PECB Certified ISO 27035 Foundation — Information Security Incident Management (ISIM)

Take the accelerated 1-day ISO 27035 Foundation course and build a solid understanding of information security incident management aligned with ISO/IEC 27035.

This introductory program provides a structured overview of the incident management lifecycle, including detection, reporting, assessment, and response. Through practical examples and guided discussions, you’ll learn the essential principles and processes needed to support an effective Incident Management System within your organization.

Completing the PECB ISO 27035 Foundation certification demonstrates your ability to apply fundamental incident management concepts, helping reduce risk and strengthen organizational resilience.

Throughout this course, you'll learn to:

• Understand the basic concepts of Information Security Incident Management
• Acknowledge the correlation between ISO/IEC 27035 and other standards and regulatory frameworks
• Understand the process approaches used to effectively manage Information Security Incidents

With Firebrand’s Lecture | Lab | Review method, you’ll certify faster than traditional training while gaining access to official courseware, expert instruction, and an immersive, distraction-free learning environment.

As part of the course, you’ll take the official ISO 27035 Foundation exam, backed by the Firebrand Certification Guarantee for added confidence. Upon certification, you’ll earn a digital badge, enhancing your professional credibility in incident management.

Why choose Firebrand?

• Flexible Delivery Options: Choose between classroom-based training or virtual instructor-led sessions, with delivery options to suit your needs and schedule
• Comprehensive Certification Preparation: Covers the PECB exam topics with integrated study materials and practice exercises
• Interactive Learning: Includes workshops, case studies, and group discussions to apply concepts practically
• Experienced Instructors: Led by certified trainers with extensive industry experience

This training course is intended for:

• Individuals interested in Information Security Incident Management process approaches
• Individuals seeking to gain knowledge about the main principles and concepts of Information Security Incident Management
• Individuals interested to pursue a career in Information Security Incident Management

• Orientation
• Introduction to the course
• Standard and regulatory frameworks
• Fundamental principles of information security
• Information Security Incident Management and ISO/IEC 27035-1 core processes
• Context establishment
• Policies and procedures
• Risk assessment
• Incident management plan
• Establish the IRT
• Relationships and connections
• Information security incident awareness and training
• Detect and alert
• Collection and reporting of information security events
• Triage and prioritize
• Containment, eradication and recovery
• Forensic analysis
• Lesson Learned
• Continual improvement
• Performance evaluation
• Certification process and closing the training and exam prep

At the end of this course, you'll sit the official PECB Certified ISO/IEC 27035 Foundation exam, covered by the Firebrand Certification Guarantee.

• Duration: 60 minutes (1 hours)
• Format: Multiple-choice questions, closed-book
• Number of questions: 40
• Pass score:70%
• CPD points available: 14 CPD points available upon completion
• Digital Badge: PECB have partnered with Credly to offer you the chance of earning a digital badge upon completing your certification.

Competency domains covered during the examination include:

• Domain 1: Fundamental principles and concepts of Information Security Incident Management
• Domain 2: Information Security Incident Management

After successfully completing the exam, you can apply for your credential. You will receive a certificate once you meet the requirements related to the specified credential.

Basic understanding of Information Security Incident Management or general IT security is recommended for the best learning experience, but not essential. 

Your accelerated course includes:

• Accommodation *
• Meals, unlimited snacks, beverages, tea and coffee *
• On-site exams **
• Exam vouchers **
• Practice tests **
• Certification Guarantee ***
• Courseware
• Up to 12 hours of instructor-led training each day
• 24-hour lab access
• Digital courseware **

* For residential training only. Accommodation is included from the night before the course starts. This doesn't apply to online courses.
** Some exceptions apply. Please refer to the Exam Track or speak with our experts.
*** Pass the first time or train again for free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.

Seven reasons why you should sit your course with Firebrand Training

• Two training options. Choose between residential classroom-based and online courses
• You'll be certified fast. With us, you’ll be trained in record time
• Our course is all-inclusive. A one-off fee covers all course materials, exams**, accommodation* and meals*. No hidden extras.
• Pass the first time or train again for free. This is our guarantee. We’re confident you’ll pass your course the first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
• You’ll learn more. A day with a traditional training provider generally runs 9am–5pm, with a nice long break for lunch. With Firebrand, you’ll get at least 12 hours/day of quality learning time with your instructor
• You’ll learn faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
• You’ll be studying with the best. We’ve been named in the Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified over 135,000 professionals

*For residential training only. Doesn't apply to online courses
**Some exceptions apply. Please refer to the Exam Track or speak with our experts