Certified Incident Handler v2

Learning Objectives of the E|CIH Program

• Understand the key issues plaguing the information security world
• Learn to combat different types of cybersecurity threats, attack vectors, threat actors and their motives
• Learn the fundamentals of incident management including the signs and costs of an incident
• Understand the fundamentals of vulnerability management, threat assessment, risk management, and incident response automation and orchestration
• Master all incident handling and response best practices, standards, cybersecurity frameworks, laws, acts, and regulations
• Decode the various steps involved in planning an incident handling and response program
• Gain an understanding of the fundamentals of computer forensics and forensic readiness
• Comprehend the importance of the first response procedure including evidence collection, packaging, transportation, storing, data acquisition, volatile and static evidence collection, and evidence analysis
• Understand anti-forensics techniques used by attackers to find cybersecurity incident cover-ups
• Apply the right techniques to different types of cybersecurity incidents in a systematic manner including malware incidents, email security incidents, network security incidents, web application security incidents, cloud security incidents, and insider threat-related incidents

E|CIH Target Audience

E|CIH is a specialist-level program that caters to mid-level to high-level cybersecurity professionals. In order to increase your chances of success, it is recommended that you have at least 1 year of experience in the cybersecurity domain.
E|CIH members are ambitious security professionals who work in Fortune 500 organizations globally.
There is no organization that is truly safe from a cyberattack. An Incident Manager with the proper incident handling skills can help reduce the impact of a breach.
The incident handling skills taught in E|CIH are complementary to the job roles below as well as many other cybersecurity jobs:
Penetration Testers
Application Security Engineers
Vulnerability Assessment Auditors
Cyber Forensic Investigators/
Analyst and SOC Analyst
Risk Assessment Administrators
System Administrators/ Engineers Network Administrators
Firewall Administrators and Network Managers/IT Managers

Course Duration

3 Days or 24 hours total class time

Course Outline

Modul 1: Introduction to Incident Handling and Response
Modul 2: Incident Handling and Response Process
Modul 3: Forensic Readiness and First Response
Modul 4: Handling and Responding to Malware Incidents
Modul 5: Handling and Responding to Email Security Incidents
Modul 6: Handling and Responding to Network Security Incidents
Modul 7: Handling and Responding to Web Application Security Incidents
Modul 8: Handling and Responding to Cloud Security Incidents
Modul 9: Handling and Responding to Insider Threats

CERTIFICATION EXAM

Eligibility Criteria
To be eligible to sit the E|CIH Exam, the candidate must either:
Attend official E|CIH training through any of EC-Council’s Authorized Training Centers (ATCs) or attend EC-Council’s live online training via iWeek or join our self-study program through iLearn (see https://iclass. eccouncil.org).
Candidates with a minimum of 1 year of work experience in the domain that would like to apply to take the exam directly without attending training are required to pay the USD100 Eligibility Application Fee. This fee is included in your training fee should you choose to attend training.

Certification:

The E|CIH exam can be attempted after the completion of the official E|CIH course taught either by any EC-Council Authorized Training Center (ATC) or by EC-Council directly. Candidates that successfully pass the exam will receive the E|CIH certificate  and membership privileges. Members are required to adhere to the policies of EC-Council’s Continuing Education Policy

Exam Details

Exam Title EC-Council Certified Incident Handler
Exam Code 212-89
Number of Questions 100
Duration 3 hours
Exam Availability EC-Council Exam Portal
Test Format Multiple Choice
Passing Score 70%