Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

PECB Authorized Training Partner

PECB Certified ISO/IEC 27035 Lead Incident Manager

PECB Authorized Boot Camp. Official courseware, expert instructors, exam, certification fee, free retake, and 31 CPD credits included. Four days to run incident management.

Verified for 2026 ISO-27035-IM Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official PECB

Authorized Training

PECB Official Training. Exam Included.

Start Monday. Certified Thursday. Exam Included. No Risk.

4 intensive days for incident response leaders and security teams

Program Abstract

REF: ISO-27035-IM 6
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 4

Incident Response. End to End.

Covers incident lifecycle management including response planning, detection, containment, recovery, and lessons learned. Build the leadership skills to manage security incidents from first detection to final report.

Official PECB Training.

Delivered by PECB-certified instructors using the official courseware. Every module maps directly to the certification exam objectives.

System Integrity Check
Content Source PECB Official
Curriculum Ver. v2025.1
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

Your certification exam is included with official PECB training. No surprise fees. Take the exam on the final day of your course.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

The only curriculum 100% aligned to the 2026 exam.

All-Inclusive

Exam Fee Included

We cover your Included ($500 value) exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with CAT-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Certify Thursday. No Waiting.

Complete your training and take the certification exam in the same week. No scheduling delays, no separate exam appointments.

Thursday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom experience with direct instructor access and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

Same instructors, same curriculum - learn from anywhere using our award-winning virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

PECB Authorized Training Partner

PECB Authorized Training Partner

Official PECB courseware taught live by PECB-certified instructors. Four days that follow the official course structure through to the exam.

6 exam domains

All 6 Exam Domains in Four Days

Incident management fundamentals, the ISO/IEC 27035 process, designing it, preparing and executing the plan, implementing and improving.

Exam fee included

Exam and Certification Fee Included

The PECB exam is 80 multiple-choice questions, open-book, three hours, and both the exam and certification fees are in your course price.

ISO/IEC 27035 series

Built on the ISO/IEC 27035 Series

Plan, detect, respond and learn from incidents using ISO/IEC 27035-1 and 27035-2 (2023) and 27035-3, ready to slot into an ISMS.

Free retake

Free Exam Retake

If you do not pass your first attempt, PECB includes one free retake within 12 months of the exam, and it is covered by your course fee.

CPD credits

31 CPD Credits

PECB issues an attestation of course completion worth 31 CPD credits you can put toward other certifications’ continuing-education requirements.

PECB Certified ISO/IEC 27035 Lead Incident Manager

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    ISO 27035 Incident Manager
    Boot Camp Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    MODULE_ID: PECB-27035IM-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Incident Management Fundamentals

    Introduction to the ISO/IEC 27035 series: Parts 1 and 2 (2023) and Part 3 (2020)
    L.01.1
    Distinguishing security events from security incidents
    L.01.2
    Incident management lifecycle overview
    L.01.3
    Relationship with business continuity (ISO 22301)
    L.01.4
    Legal, regulatory, and ethical aspects
    L.01.5
    Organizational context and stakeholder requirements
    L.01.6

    MODULE_ID: PECB-27035IM-02

    Live Training QS: ~5
    DAY 2
    Critical Path

    Designing the Incident Management Process

    Incident management plan design and documentation
    L.02.1
    Establishing the Incident Response Team (IRT)
    L.02.2
    Incident classification and categorization frameworks
    L.02.3
    Severity levels, escalation procedures, and decision trees
    L.02.4
    Standard Operating Procedures for common incident types
    L.02.5
    Integrating incident management with existing ISMS
    L.02.6

    MODULE_ID: PECB-27035IM-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Incident Response Operations

    Communication planning: internal, external, regulators, media
    L.03.1
    Detection mechanisms and monitoring integration
    L.03.2
    Initial response: triage, containment, immediate actions
    L.03.3
    Evidence collection, preservation, and chain of custody
    L.03.4
    Eradication and recovery: restoring services, verifying integrity
    L.03.5
    Post-incident review methodology and lessons learned
    L.03.6

    MODULE_ID: PECB-27035IM-04

    Live Training QS: ~6
    DAY 4
    Critical Path

    Advanced Analysis, Improvement, and Exam

    Advanced incident analysis and root cause analysis
    L.04.1
    KPIs: MTTD, MTTR, and incident management dashboards
    L.04.2
    Management review and program governance
    L.04.3
    Continual improvement using PDCA methodology
    L.04.4
    Aligning incident management with organizational risk appetite
    L.04.5
    Exam preparation and incident management best practices
    L.04.6
    COURSE PROGRESS Day 1 of 4
    FREQUENTLY ASKED QUESTIONS

    ISO/IEC 27035 Lead Incident Manager
    Boot Camp FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    The ISO/IEC 27035 series is the international standard for information security incident management, from planning and detection through response, recovery and lessons learned. The PECB Certified ISO/IEC 27035 Lead Incident Manager credential shows you can design, run and improve the incident management process for an organization.

    Incident response team leads and members, security operations managers, and anyone who owns the incident management process in an organization or advises one on it.

    PECB asks for general knowledge of incident management, information security principles and the ISO/IEC 27000 family of standards. Hands-on response experience helps but is not required.

    Day 1 introduces incident management concepts and the ISO/IEC 27035 series. Day 2 is designing and preparing the incident management plan. Day 3 covers detecting, reporting and responding to incidents. Day 4 covers monitoring the process and improving it after each incident. The four days follow PECB’s official course structure, with the exam at the end.

    The exam covers 6 competency domains: fundamental principles of information security incident management; the incident management process in ISO/IEC 27035; designing an organizational incident management process; preparing and executing the incident response plan; implementing incident management processes; improving incident management processes and activities. Questions are weighted across the domains, and the course is organized so every domain is taught before you sit the exam.

    The exam has 80 multiple-choice questions, a mix of standalone and scenario-based, and lasts 3 hours. It is open-book, and the passing score is 70%. Online exams are graded instantly.

    Yes. Both the PECB certification exam and the certification fee are included in your course fee, and the exam is scheduled at the end of the course. There is nothing extra to buy to get certified.

    Yes. PECB includes one free exam retake within 12 months of your first attempt, and it is covered by your course fee.

    ISO/IEC 27001 requires that incidents be managed but leaves the process to you. The ISO/IEC 27035 series is the detailed guidance for that process, so it slots directly into an existing ISMS and gives an auditor something concrete to test.

    No, it is a management course. You learn to design, run and improve the incident management process, coordinate teams and communicate with stakeholders and regulators. It does not teach forensic tooling or hands-on malware analysis.

    As of 2026 the series stands at ISO/IEC 27035-1:2023 (principles and process), ISO/IEC 27035-2:2023 (planning and preparation) and ISO/IEC 27035-3:2020 (ICT incident response operations). This course covers the current parts.

    Yes. PECB issues an attestation of course completion worth 31 CPD (Continuing Professional Development) credits to everyone who attends the course.

    Yes. PECB is accredited to ISO/IEC 17024, the international standard for bodies certifying people, and its credentials are recognized internationally. Training Camp delivers the official PECB courseware as an authorized training partner.

    Get the Free
    PECB-27035IM Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    ISO 27035 IM Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Featured on