Certification
The “PECB Certified ISO/IEC 27035 Lead Incident Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of Information Security Incident Management
Domain 2: Information Security Incident Management best practices based on ISO/IEC 27035
Domain 3: Designing and developing an Organizational Incident Management process based on ISO/IEC 27035
Domain 4: Preparing for Information Security incidents and implementing an Incident Management Plan
Domain 5: Enacting the Incident Management Process and handling Information Security Incidents
Domain 6: Performance measurement and monitoring
Domain 7: Improving the Incident Management processes and activities
For specific information about exam type, languages available, and other details, please visit the List of PECB Exams and the Examination Rules and Policies.
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about ISO/IEC 27035 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Manager Certifications are:
| Credential |
Exam |
Professional experience |
ISIMMS project experience |
Other requirements |
| PECB Certified ISO/IEC 27035 Provisional Incident Manager |
PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent |
None |
None |
Signing the PECB Eode of Ethics |
| PECB Certified ISO/IEC 27035 Incident Manager |
PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent |
Two years: One year of work experience in Information Security Incident Management |
ISIM activities: a total of 200 hours |
Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27035 Lead Incident Manager |
PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent |
Five years: Two years of work experience in Information Security Incident Management |
ISIM activities: a total of 300 hours |
Signing the PECB Code of Ethics |
| PECB Certified ISO/IEC 27035 Senior Lead Incident Manager |
PECB Certified ISO/IEC 27035 Lead Incident Manager Exam or equivalent |
Ten years: Seven years of work experience in Information Security Incident Management |
ISIM activities: a total of 1,000 hours |
Signing the PECB Code of Ethics |
To be considered valid, these Information Security Incident Management activities should follow best implementation and management practices and include the following
- Drafting an Information Security Incident Management plan
- Implementing Information Security Incident Management processes
- Managing Information Security Incident processes
- Conducting forensics investigation
- Monitoring and analyzing security events
- Identifying potential threats and security trends
- Vulnerabilities assessment
- Monitoring and managing risks
- Implementing corrective or preventive actions
- Performing internal controls
- Managing an Incident Response Team
General Information
- Certification and examination fees are included in the price of the training course
- Training material containing over 450 pages of information and practical examples will be distributed
- An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
- In case of exam failure, you can retake the exam within 12 months for free
