PECB ISO/IEC 27035 Foundation Exam Practice & Certification Guide study guide
PECB ISO/IEC 27035 Foundation Exam Practice & Certification Guide · Work through your exam, one topic at a time.
The PECB ISO/IEC 27035 Foundation credential is an entry-level certificate that demonstrates you understand the fundamental methodologies, requirements, and management approach behind information security incident management. PECB's own description states that the training course enables you to learn the basic elements needed to implement an Incident Management Plan and manage information security incidents, and that holders of the certificate have shown they understand the fundamentals. The course is aimed at individuals interested in incident management process approaches, people seeking knowledge of the main principles and concepts of information security incident management, and those pursuing a career in the field. PECB lists basic knowledge of security incident management as preferred rather than mandatory. Topics on this exam: Fundamental principles and concepts of Information Security Incident Management and Information Security Incident Management. The PECB ISO/IEC 27035 Foundation Exam Practice & Certification Guide study guide has 2 sections and about 713 words.
01Fundamental Principles and Concepts of Information Security Incident Management
This domain tests the vocabulary and principles that keep incident work disciplined rather than ad hoc. Expect questions on the difference between an event and an incident, the policy–plan–IRT relationship, risk-based classification, and continual improvement. An information security event is an identified occurrence indicating a possible breach of policy or failure of controls. Most events are benign and require triage, not full response.
366 words, about 2 min02Information Security Incident Management
This domain tests the operational process: how an organization moves from a report to a controlled response and then to improvement. Expect questions on phase order, severity and escalation, containment versus eradication, evidence handling, and post-incident review. Plan and prepare establishes the incident management policy, plan, IRT, communication routes, severity matrix, tools, training and exercises. ISO/IEC 27035-2 supports this planning; ISO/IEC 27035-3 addresses ICT response operations.
347 words, about 2 min