IISO/IEC 27035:2023 - INFORMATION SECURITY INCIDENT MANAGEMENT
- Home
- Certifications
- ISO/IEC 27035:2023 - Information Security Incident Management
Description
The ISO/IEC 27035 Information Security Incident Management delivers the prime principles of security to prevent and respond effectively to information security incidents. In addition, the ISO/IEC 27035 incorporates specific processes for managing information security incidents, events, and potential vulnerabilities.
Benefits of ISO 27035 Certification
- Understand the concepts, approaches, and tools for an effective information security incident management
- Acquire the necessary knowledge to establish and manage an information security incident management team
- Diminish any possible interruption and negative impacts on business operations.
- Improve your information security management skills and incident process analysis.
- Obtain knowledge on best practices of information security management.
-
ISO/IEC 27035 Foundation:
ISO/IEC 27035 Foundation training enables you to learn the basic elements to implement an Incident Management Plan and manage Information Security Incidents. During this training course, you will be able to understand Information Security Incident Management processes.
After completing this course, you can sit for the exam and apply for an “SandBP Certified ISO 27035 Foundation” credential. An SandBP Foundation Certificate shows that you have understood the fundamental methodologies, requirements, framework, and management approach.
-
ISO/IEC 27035 Incident Manager:
ISO/IEC 27035 Incident Manager training enables you to acquire the necessary expertise to support an organization in implementing an Information Security Incident Management plan based on ISO/IEC 27035. During this training course, you will gain a comprehensive knowledge of a process model for designing and developing an organizational incident management plan. The compatibility of this training course with ISO/IEC 27035 also supports the ISO/IEC 27001 by providing guidance for Information Security Incident Management.
After understanding all the necessary concepts of Information Security Incident Management, you can sit for the exam and apply for a “S&BP Certified Incident Manager” credential. By holding a S&BP Incident Manager Certificate, you will be able to demonstrate that you have the practical knowledge and professional capabilities to to support and lead a team in managing Information Security Incidents.
- Introduction to Information Security Incident Management concepts as recommended by ISO/IEC 27035
- Designing and preparing an Information Security Incident Management plan
- Enacting the Incident Management process and handling Information Security incidents
- Monitoring and continual improvement of the Information Security Incident Management plan
- Certification Exam
- PREREQUISITE: A fundamental understanding of ISO 27035 and comprehensive knowledge of management principles, concepts, and strategies.
Certification
- Candidates who score 70% and above in the examination will be issued an SANDBP certificate.
- In case you do not meet the pass mark, you can retake the exam for FREE after the first attempt while subsequent retakes would come at a cost.
Criteria for Suspending and Withdrawing the Scope of Certification
SANDBP reserves the right to suspend or revoke certifications for reasons including fraud, deceit, or submission of inaccurate data.
Process:
- Certificate holders will be notified by certified mail if evidence of charges is found.
- They may present their defense in writing to the certification board.
- The board will review the case and decide to uphold or deny the suspension/revocation.
Causes for Suspension/Withdrawal:
- Improper use of certificates/logos
- Malpractices
- Providing false information
- Ineligibility for applied examinations
- Voluntary suspension requests
Recertification Process
Recertification ensures that certified individuals maintain their knowledge and skills in line with the latest standards and practices. It is a critical process that reaffirms the competency of certified professionals, allowing them to stay current with evolving industry standards.
Criteria for Recertification:
-
Transition Exam:
* Individuals must take and pass a transition exam when there is a change in the current version of the certification standard.
* The transition exam focuses on the updates and changes in the new version of the standard, ensuring that certified individuals are knowledgeable about the latest requirements and practices. -
Adherence to Code of Ethics:
Certified individuals must adhere to a code of ethics, demonstrating professionalism and integrity in their practice. Any violations of the code of ethics may result in the suspension or revocation of certification
-
Payment of Recertification Fees:
Payment of the required recertification fees is necessary to process and validate the renewal of certification.
Introduction
To maintain the integrity and fairness of our examinations, specific guidelines have been established for proctoring. These rules apply to all candidates and must be adhered to strictly. Failure to comply may result in disqualification or other disciplinary actions.
General Requirements
Technology Setup
- Device: Use a desktop or laptop with a working webcam and microphone. Mobile phones or tablets are not permitted unless explicitly allowed.
- Internet: Ensure a stable internet connection with sufficient bandwidth to stream video and audio continuously.
- Browser: Use the designated browser as specified by the exam platform.
- Power Backup: Ensure your device is fully charged and/or connected to a reliable power source.
Environmental Setup
- Location: Choose a quiet, well-lit room with minimal distractions.
- Background: Ensure the background is plain and free of any clutter or distractions.
- Privacy: No other person is allowed in the room during the examination.
Pre-Exam Procedures
Present a valid government-issued photo ID or institution-approved identification document. Ensure that no unauthorized materials (e.g., books, notes, or electronic devices) are present.
During the Exam
Behavior Guideline
- Focus on the Screen: Avoid looking away from the screen for extended periods.
- No Assistance: You are prohibited from receiving help from anyone or any external resource.
Prohibited Items
- Electronic devices such as mobile phones, tablets, smartwatches, and earphones.
- Books, notes, or any other study material unless explicitly permitted.
Proctor Interaction
- Follow all instructions given by the proctor.
- If contacted for clarification or rule enforcement, respond promptly and cooperatively.
- Inform the proctor immediately in case of technical issues.
Post-Exam Procedures
Submission
- Ensure your exam responses are submitted within the designated time.
- Do not close the exam window or disconnect until you receive confirmation that your submission is successful.
Feedback
- Report any technical issues or concerns to the designated support team immediately aƜer the exam.
Violations and Consequences
Examples of Violations
- Using unauthorized materials or devices.
- Attempting to impersonate another candidate.
- Engaging in suspicious behavior (e.g., frequent movement, talking).
- Disconnecting intentionally without justification.
Consequences
- Warnings for minor infractions.
- Disqualification of the exam attempt for major violations.
