ICTQual ISO/IEC 27035:2023 Information Security Incident Management Lead Auditor Course

The course is designed as a 5-day ICTQual AB lead auditor training programme with mandatory assessment through Approved Training Centres, focused on ISO/IEC 27035:2023 information security incident management auditing.

• Based on ISO/IEC 27035:2023 information security incident management guidance

• Covers incident detection, reporting, assessment, response, containment, eradication, recovery, and post-incident review

• Develops lead auditor competence for assessing incident management systems and processes

• Includes auditing principles and methodologies specific to ISO/IEC 27035:2023 compliance

• Supports online, in-person, or blended delivery subject to the Approved Training Centre

• Includes mandatory assessment consisting of 100 multiple-choice questions with a minimum pass score of 75%

The ICTQual ISO/IEC 27035:2023 Information Security Incident Management Lead Auditor Course equips learners with the knowledge and skills required to lead audits in the field of information security incident management. It is based on ISO/IEC 27035, which provides guidelines for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an organization’s incident management process.

• Provides lead auditor knowledge for ISO/IEC 27035:2023 information security incident management

• Supports assessment of an organization’s incident management system and processes

• Builds understanding of incident detection, analysis, containment, eradication, recovery, and review

• Links incident management with confidentiality, integrity, and availability of information assets

• Develops the ability to identify nonconformities and improvement opportunities

• Supports organizations in strengthening incident response capability and resilience against cyber threats

Learners will develop the knowledge and skills required to understand ISO/IEC 27035:2023, manage the incident lifecycle, and audit information security incident management processes effectively.

• Explain the purpose and significance of ISO/IEC 27035:2023 in information security management

• Describe the key principles, objectives, scope, and applicability of information security incident management

• Outline the components and lifecycle of an effective incident management framework

• Recognize incident detection sources, reporting procedures, classification methods, and confidentiality requirements

• Perform risk-based incident assessment, prioritization, response, containment, eradication, recovery, and documentation

• Plan, execute, report, and follow up audits of ISO/IEC 27035:2023 incident management compliance

This course is designed for cybersecurity professionals, auditors, and IT professionals seeking expertise in information security incident management and ISO/IEC 27035:2023 auditing practices.

• Cybersecurity professionals responsible for incident management or incident response

• Information security managers and officers involved in improving incident management processes

• IT professionals responsible for detecting, reporting, assessing, or responding to security incidents

• Internal auditors and external auditors working with information security management systems

• Risk, compliance, governance, and assurance professionals involved in security incident oversight

• Professionals seeking competence to assess ISO/IEC 27035:2023 incident management practices

Entry requirements may vary by institution, but typical requirements include foundational information security knowledge, familiarity with ISO standards, and relevant experience in IT, cybersecurity, or auditing.

• Basic understanding of information security management systems principles, ISO/IEC 27001, incident management processes, and related ISO standards

• Prior knowledge or experience in auditing, IT, cybersecurity, incident response, or information security management is recommended

Assessment is mandatory and conducted through ICTQual AB Approved Training Centres to evaluate learners’ understanding of the course material and their ability to apply concepts in practical situations.

• Mandatory assessment through an Approved Training Centre

• Multiple-choice question assessment

• Assessment consists of 100 multiple-choice questions

• Minimum pass score is 75%

Successful completion supports progression into specialist auditing, incident response, cyber resilience, compliance, and advanced information security management roles and training pathways.

• Progression to ISO/IEC 27035 internal auditor, lead auditor, or advanced incident management responsibilities

• Progression to information security management, cyber resilience, business continuity, and incident response leadership roles

• Progression to specialist areas such as cyber threat intelligence, digital forensics, threat hunting, and regulatory compliance

• Progression to broader ISO/IEC 27001, ISO/IEC 27002, ISMS auditing, and cybersecurity governance career pathways