The ISO/IEC 27035 series describes the incident management process (plan and prepare, detect and report, assess and decide, respond, and learn lessons) with guidance on incident response teams. We use it to build playbooks that meet ISO 27001, CERT-In six-hour reporting, DORA and other regulatory timelines.
Who it is for
- Security operations and IT teams
- Regulated firms with tight incident reporting deadlines
What you gain
- Faster, calmer incident response
- Reporting ready for regulators
How we help you apply it
Maturity review
Assess current practice against the guidance and agree what good looks like for your organisation.
Framework design
Translate the principles into a practical framework, roles and tools that fit your existing management systems.
Embedding
Workshops and coaching so teams apply the framework in day-to-day decisions.
Review and reporting
Periodic reviews and reporting that show progress to leadership and stakeholders.
ISO/IEC 27035 questions
Do we need a separate incident team?
Not necessarily. Smaller organisations often define roles across IT, legal and communications, with external support for forensics.