ISO/IEC 27035 Lead Incident Manager
Master the leadership of information security incident management in line with ISO/IEC 27035. Drive the team and the incident response process.
Who is this course for?
- Managers of incident response teams (CSIRT, SOC)
- Consultants who design incident management processes
- Security managers in organisations affected by NIS2
- Professionals who lead incident response
What you'll gain
- The PECB Certified ISO/IEC 27035 Lead Incident Manager credential
- The ability to design and lead an incident management process
- Command of the reporting regime required by NIS2
- A key credential for incident response roles
Course programme
Fundamentals and planning
- Incident management framework and ISO 27035
- Team planning and preparation
Detection and assessment
- Detection, logging and classification of incidents
- Assessment and prioritisation
Response and containment
- Response, containment and eradication
- Coordination of the response team
Learning and reporting
- Post-incident analysis and lessons learned
- Incident reporting (NIS2)
Certification exam
- Review and mock exam
- Official Lead Incident Manager exam
Exam, credits & certification
Once you pass the exam, you can apply for the "PECB Certified ISO/IEC 27035 Lead Incident Manager" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the course level according to PECB. The exam duration is indicative; ask me for the exact details when you enrol.
Your trainer

Ricardo Coronel Lemus
More than 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach standards theoretically: I apply them day to day with real clients — that's what I bring to my coaching and exam preparation.
Frequently asked questions
Do I need any prerequisites?
What language is the exam in?
What is the difference between Self-Study and Self-Study + Coaching?
What if I don't pass the exam?
Why is this relevant now?
Ready to get certified in ISO/IEC 27035 Lead Incident Manager?
Choose your option above and enrol online. A question or need some advice? Write to me or book a call.