CREST Certified Incident Manager (CCIM)

On this 4-day accelerated Firebrand course for CREST's Certified Incident Manager (CCIM) exam, you'll learn to determine the path of investigation to be taken in response to a cyber breach. You'll make use of real world experience and the information available to continuously re-evaluate the situation and manage the direction of investigation.

Achieving the Incident Manager certification validates your ability to lead and present all elements of the Incident Response project lifecycle including identification, containment and eradication.

Some of the skills you'll develop and eventually be tested on includes:

• Client management
• Containment techniques
• Project management and time management
• Evidence handling
• Threat intelligence, contextualisation attribution and motivation
• Risk analysis
• Attack and compromise lifecycle
• Technical vulnerability root cause identification

Firebrand make use of a unique Lecture | Lab | Review technique. This approach combines both theoretical knowledge with hands-on practical skills. This means you'll learn faster and develop the real-world experience necessary to apply your skills when you return to work.

On this course, you'll be prepared for and sit the CREST Certified Incident Manager (CCIM) examination on day 4. This is covered by your Certification Guarantee.

An Incident Manager's role is expected to be fulfilled by highly experienced personnel that has spent a considerable amount of time working on incident response engagement. You should also have strong and broad technical skills in order to play a key part in understanding the details of a cyber incident.

Throughout this course, you'll cover the following material:

• Client management
• Containment techniques
• Project management and time management
• Evidence handling
• Communications
• Recovery and remediation
• On-going technical prevention
• Judgement making and critical reasoning
• Written skills
• Third Parties
• Reporting Agencies
• Threat intelligence, Contextualisation Attribution and Motivation
• Industry Best Practice
• Risk Analysis
• Attack and compromise lifecycle
• Legal and Jurisdictional Issues
• Ethics
• Technical vulnerability root cause identification
• Physical threats
• Insider attacks

• CREST Practitioner Intrusion Analyst (CPIA)
• CREST Registered Intrusion Analyst (CRIA)
• You should also have a minimum of 6 years regular and frequent multi-discipline experience.

On day 4 of this accelerated course, you'll sit the following exams at the Firebrand Training centre, covered by your Certification Guarantee:

Incident Manager Part 1

• Duration: 3 hours
• Number of questions: 150
• Format: Multiple choice and 1 written response

Incident Manager Part 2

• Duration: 4 hours
• Number of questions: 3
• Format: Written responses