ISO - 27035 Lead Incident Manager



Just 3 Days



Classroom / Online / Hybrid

Next date

Next date:

26/4/2021 (Monday)


Accelerated ISO training, ISO course and ISO certification

Master a model for implementing an incident management process throughout your organisation - using the ISO/IEC 27035 standard - in just 3 days.

You’ll study practical exercises as you get the knowledge you need to manage information security incidents quickly. You’ll also learn:

  • Incident management standards and best practices
  • Effective security incident management using ISO/IEC 27035
  • Change management and incident analysis processes
  • How to establish an Information Security Incident Response Team

Get immersed in ISO/IEC 27035 in a distraction-free environment and learn faster with Firebrand’s Lecture | Lab | Review methodology.

You’ll sit the PECB Certified ISO/IEC 27035 Lead Incident Manager exam as part of your accelerated course. This exam is covered by your Certification Guarantee.

If you’re responsible for information and security or conformity in your organisation, this 3-day course is ideal for you. This course is also beneficial for:

  • Incident managers
  • Business Process Owners
  • Information Security Risk Managers
  • Regulatory Compliance Managers
  • Members of Incident Response Team
  • Persons responsible for information security or conformity within an organisation

This accelerated training is fully compatible with ISO/IEC 27035 which supports ISO 27001 by providing guidance for incident management.

Four reasons why you should sit your course with Firebrand Training

  1. You'll be trained and certified faster. Learn more on this 3-day accelerated course. You'll get at least 12 hours a day of quality learning time in a distraction-free environment
  2. Your course is all-inclusive. One simple price covers all course materials, exams, accommodation and meals – so you can focus on learning
  3. Pass first time or train again for free. Your expert instructor will deliver our unique accelerated learning methods, allowing you to learn faster and be in the best possible position to pass first time. In the unlikely event that you don't, it's covered by your Certification Guarantee
  4. Study with an award-winning training provider. We've won the Learning and Performance Institute's "Training Company of the Year" three times. Firebrand is your fastest way to learn, with 102.635 students saving more than one million hours since 2001



Introduction, incident management framework according to ISO/IEC 27035

  • Concepts and definitions related to information security and incident management
  • Incident management standards, and best practices
  • Choosing an incident management framework
  • Understanding an organisation and its context

Planning the implementation of an Organisational Incident Management Process based on ISO/IEC 27035

  • Incident management strategy and project management
  • Planning the implementation of an effective incident management process
  • Preliminary analysis and selection of an approach and methodology
  • Design and document an incident detection, reporting and management process
  • Defining roles and responsibilities in the context of the implementation and management of an Incident Management Process

Implementing an Incident Management Process

  • Define the document and record management processes
  • Incident Management policies & procedures
  • Implementation of security processes and controls related to incident management
  • Change management process
  • Incident analysis processes
  • Effective communication and the communication strategies
  • Establish the Information Security Incident Response Team

Monitoring, measuring and improving an Incident Management Process

  • Monitoring and evaluating the effectiveness of incident management process in operations
  • Development of metrics, performance indicators and dashboards
  • Management reviews
  • Implementation of a continual improvement program
  • Develop and propose the best corrective and preventive action plans

Exam Track

As part of your accelerated course, you'll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

PECB Certified ISO/IEC 27035 Lead Incident Manager exam

  • Format: Open book
  • Duration: 3 hours
  • Passing score: 70%
  • Domains:
    • Domain 1: Fundamental principles and concepts in Incident Management
    • Domain 2: Incident Management Best Practice based on ISO 27035
    • Domain 3: Designing and Developing an Organisational Incident Management Process based on ISO 27035
    • Domain 4: Preparing for Incident Management and implementing an Incident Management Process
    • Domain 5: Enacting the Incident Management Process and handling Security Incidents
    • Domain 6: Performance Monitoring and Measuring
    • Domain 7: Improving the Incident Management Process

What's Included

Your accelerated course includes:

  • Accommodation *
  • Meals, unlimited snacks, beverages, tea and coffee *
  • On-site exams **
  • Exam vouchers **
  • Practice tests **
  • Certification Guarantee ***
  • Courseware
  • Up-to 12 hours of instructor-led training each day
  • 24-hour lab access
  • Digital courseware **
  • * For residential training only. Doesn't apply for online courses
  • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
  • *** Pass first time or train again free (just pay for accommodation, exams and incidental costs)


Before attending this accelerated course, you should have:

  • An understanding of ISO/IEC 27035
  • Comprehensive knowledge of Information Security

Are you ready to get certified in record time?

We interview all applicants for the course on their technical background, degrees and certifications held, and general suitability. If you get through this screening process, it means you stand a great chance of passing.

Firebrand Training is an immersive training environment. You must be committed to the course. The above prerequisites are guidelines, but many students with less experience have other background or traits that have enabled their success in accelerated training through Firebrand Training.

If you have any doubts as to whether you meet the pre-requisites please call (0)8 52 50 01 66 and speak to one of our enrolment consultants, who can help you with a training plan.


We've currently trained 102.635 students in 12 years. We asked them all to review our Accelerated Learning. Currently,
96,68% have said Firebrand exceeded their expectations:

"Global approved ISO Standards are a great way to provide a baseline of understanding Incident management workings and the need to provide next level of security Incident Management"
Anonymous, Sandvik (28/10/2019 (Monday) to 30/10/2019 (Wednesday))

"Firebrand gave me the chance to deep dive into topic."
Anonymous (28/10/2019 (Monday) to 30/10/2019 (Wednesday))

"Global approved ISO Standards are a great way to provide a baseline of understanding Incident management workings and the need to provide next level of security Incident Management"
Anonymous, Sandvik (28/10/2019 (Monday) to 30/10/2019 (Wednesday))

"Firebrand gave me the chance to deep dive into topic."
Anonymous (28/10/2019 (Monday) to 30/10/2019 (Wednesday))

"This is my first experience with Firebrand and I can only speak for this experience and educator. Based on the past 3 days, I would highly recommend firebrand for the quality of education I got."
Marcel Janssen. (17/3/2021 (Wednesday) to 19/3/2021 (Friday))

Course Dates

ISO - 27035 Lead Incident Manager - Incident Management




Book now

26/4/2021 (Monday)

28/4/2021 (Wednesday)

Wait list


1/11/2021 (Monday)

3/11/2021 (Wednesday)


Book now

Latest Reviews from our students