ISO/IEC 27035 – Information Security Incident Management Assessment

Company Certification Int. offers professional conformity assessment services for organizations aiming to align with ISO/IEC 27035, the globally recognized guideline for managing information security incidents. While ISO/IEC 27035 is not certifiable, our structured assessment ensures your organization adopts best practices to effectively detect, respond to, and recover from security incidents.

What Is ISO/IEC 27035?

ISO/IEC 27035 is an international guideline designed to help organizations establish and maintain an effective Information Security Incident Management (ISIM) process. It includes guidance for:

Preparing for incident handling
Detecting and reporting incidents
Assessing and responding to incidents
Learning from incidents to improve the system

The current version (ISO/IEC 27035-1:2023) outlines principles and processes that align well with ISO/IEC 27001 and modern cybersecurity needs.

What We Offer

Company Certification Int. provides comprehensive conformity assessments that include:

Independent review of your incident management policies and procedures
Gap analysis based on ISO/IEC 27035 principles
Evaluation of detection, response, and communication mechanisms
Expert recommendations for closing identified gaps
Issuance of a Conformity Assessment Certificate (non-accredited)

Key Benefits

Improves cyber incident readiness and response
Supports ISO/IEC 27001 implementation and audits
Demonstrates commitment to global security standards
Builds trust with clients, regulators, and stakeholders
Identifies vulnerabilities and process improvement areas

Who Should Consider This Assessment?

IT service providers and MSPs/MSSPs
Financial institutions and fintech companies
Healthcare, insurance, and government bodies
Organizations managing personal, confidential, or regulated data
Any business pursuing ISO/IEC 27001 certification or needing robust incident handling

Our Delivery Method

Fully remote or hybrid assessment options
Fast turnaround and flexible scheduling
Secure digital reporting and documentation

What You’ll Receive

Gap Analysis Report
Recommendations aligned with ISO/IEC 27035
Optional improvement roadmap
Certificate of Conformity (3rd-party verified)

Frequently Asked Questions (FAQ)

Q1: Is ISO/IEC 27035 certifiable like ISO 27001?
A1: No, ISO/IEC 27035 is a guideline. It does not have certifiable requirements, but organizations can undergo a conformity assessment to show alignment.

Q2: What’s the benefit of a conformity assessment?
A2: It validates that your organization follows international best practices in security incident management and provides credibility in front of clients and partners.

Q3: Do I need ISO 27001 before doing this?
A3: No, but ISO/IEC 27035 complements ISO 27001 by covering incident management. It can be done as a standalone assessment or in support of ISO 27001 efforts.

Q4: Will you help improve our incident response process?
A4: Yes, we provide recommendations and, if needed, consulting services to enhance your processes based on the assessment findings.

Get Started

Let our team at Company Certification Int. help you assess, improve, and align your information security incident management process with ISO/IEC 27035.