| Topic | Details |
| Topic 1 | - Designing and developing an organizational incident management process based on ISO
- IEC 27035: This section of the exam measures skills of Information Security Analysts and covers how to tailor the ISO
- IEC 27035 framework to the unique needs of an organization, including policy development, role definition, and establishing workflows for handling incidents.
|
| Topic 2 | - Implementing incident management processes and managing information security incidents: This section of the exam measures skills of Information Security Analysts and covers the practical implementation of incident management strategies. It looks at ongoing incident tracking, communication during crises, and ensuring incidents are resolved in accordance with established protocols.
|
| Topic 3 | - Information security incident management process based on ISO
- IEC 27035: This section of the exam measures skills of Incident Response Managers and covers the standardized steps and processes outlined in ISO
- IEC 27035. It emphasizes how organizations should structure their incident response lifecycle from detection to closure in a consistent and effective manner.
|
| Topic 4 | - Improving the incident management processes and activities: This section of the exam measures skills of Incident Response Managers and covers the review and enhancement of existing incident management processes. It involves post-incident reviews, learning from past events, and refining tools, training, and techniques to improve future response efforts.
|
| Topic 5 | - Fundamental principles and concepts of information security incident management: This section of the exam measures skills of Information Security Analysts and covers the core ideas behind incident management, including understanding what constitutes a security incident, why timely responses matter, and how to identify the early signs of potential threats.
|