| Topic | Details |
| Topic 1 | - Fundamental principles and concepts of information security incident management: This section of the exam measures skills of Information Security Analysts and covers the core ideas behind incident management, including understanding what constitutes a security incident, why timely responses matter, and how to identify the early signs of potential threats.
|
| Topic 2 | - Designing and developing an organizational incident management process based on ISO
- IEC 27035: This section of the exam measures skills of Information Security Analysts and covers how to tailor the ISO
- IEC 27035 framework to the unique needs of an organization, including policy development, role definition, and establishing workflows for handling incidents.
|
| Topic 3 | - Preparing and executing the incident response plan for information security incidents: This section of the exam measures skills of Incident Response Managers and covers the preparation and activation of incident response plans. It focuses on readiness activities such as team training, resource allocation, and simulation exercises, along with actual response execution when incidents occur.
|
| Topic 4 | - Improving the incident management processes and activities: This section of the exam measures skills of Incident Response Managers and covers the review and enhancement of existing incident management processes. It involves post-incident reviews, learning from past events, and refining tools, training, and techniques to improve future response efforts.
|