The EC-Council Certified Incident Handler, E|CIH training and certification course will address the needs of the professionals who want to get equipped with the principles and knowledge for detecting and responding to the current security incidents and threats emerging in an information system. The course has been structured to prepare professionals to create incident handling codes, learn about laws and policies for incident handling, and differentiate between various types of incidents such as network security incidents, malicious code incidents, and insider attack incidents.

The E|CIH program focuses on a structured approach to the incident handling and response (IH&R) process. This IH&R process includes stages such as; incident handling and response preparation, incident validation and prioritization, incident escalation and notification, forensic evidence gathering and analysis, incident containment, systems recovery, and incident eradication. This systematic incident handling and response process creates awareness among the responders in knowing how to respond to various types of security incidents in organizations today. The types of cybersecurity incidents covered include:

• Malware incidents.
• Email security incidents.
• Network security incidents.
• Web application security incidents.
• Cloud security incidents.
• Insider threat-related incidents.

This course is a comprehensive specialist level that imparts knowledge and skills on how organizations can effectively handle post-breach consequences by reducing the impact of the incident, both financially and reputationally. It has been designed and developed in collaboration with cybersecurity, incident handling, and response practitioners across the globe.