ISO/IEC 27035 – Information Security Incident Management Assessment
Company Certification Int. offers professional conformity assessment services for organizations aiming to align with ISO/IEC 27035, the globally recognized guideline for managing information security incidents. While ISO/IEC 27035 is not certifiable, our structured assessment ensures your organization adopts best practices to effectively detect, respond to, and recover from security incidents.
What Is ISO/IEC 27035?
ISO/IEC 27035 is an international guideline designed to help organizations establish and maintain an effective Information Security Incident Management (ISIM) process. It includes guidance for:
Preparing for incident handling
Detecting and reporting incidents
Assessing and responding to incidents
Learning from incidents to improve the system
The current version (ISO/IEC 27035-1:2023) outlines principles and processes that align well with ISO/IEC 27001 and modern cybersecurity needs.
What We Offer
Company Certification Int. provides comprehensive conformity assessments that include:
Independent review of your incident management policies and procedures
Gap analysis based on ISO/IEC 27035 principles
Evaluation of detection, response, and communication mechanisms
Expert recommendations for closing identified gaps
Issuance of a Conformity Assessment Certificate (non-accredited)
Key Benefits
Improves cyber incident readiness and response
Supports ISO/IEC 27001 implementation and audits
Demonstrates commitment to global security standards
Builds trust with clients, regulators, and stakeholders
Identifies vulnerabilities and process improvement areas
Who Should Consider This Assessment?
IT service providers and MSPs/MSSPs
Financial institutions and fintech companies
Healthcare, insurance, and government bodies
Organizations managing personal, confidential, or regulated data
Any business pursuing ISO/IEC 27001 certification or needing robust incident handling
Our Delivery Method
Fully remote or hybrid assessment options
Fast turnaround and flexible scheduling
Secure digital reporting and documentation
What You’ll Receive
Gap Analysis Report
Recommendations aligned with ISO/IEC 27035
Optional improvement roadmap
Certificate of Conformity (3rd-party verified)
Frequently Asked Questions (FAQ)
Q1: Is ISO/IEC 27035 certifiable like ISO 27001?
A1: No, ISO/IEC 27035 is a guideline. It does not have certifiable requirements, but organizations can undergo a conformity assessment to show alignment.
Q2: What’s the benefit of a conformity assessment?
A2: It validates that your organization follows international best practices in security incident management and provides credibility in front of clients and partners.
Q3: Do I need ISO 27001 before doing this?
A3: No, but ISO/IEC 27035 complements ISO 27001 by covering incident management. It can be done as a standalone assessment or in support of ISO 27001 efforts.
Q4: Will you help improve our incident response process?
A4: Yes, we provide recommendations and, if needed, consulting services to enhance your processes based on the assessment findings.
Get Started
Let our team at Company Certification Int. help you assess, improve, and align your information security incident management process with ISO/IEC 27035.
The Certification Process
Online gap analysis allows us to see the current
- quality benchmark within your organization,
- the finances required
- the time required for this project (System and Certification Fee)
Your Estimate will be shared with you in 24 hours.
Upon Estimate Approval the project starts:
- A client executive is assigned to your project
- Contact information is shared with you
- The Payment details are provided to you
All Support is delivered Online.
The Client Executive will provide the Documentation Templates and explain to you how to amend it.
You will be required to perform the following tasks:
- Identify your core or business processes.
- Amend documentation that meets your business needs. (Policy statements, objectives, manuals, work instructions, job descriptions, forms.)
- Encourage employees to be aware of the new documented system
- Review, approve, and distribute the documents to those who need access to the information.
- Ensure procedures are being performed as documented.
- Ensure employees are trained properly for the tasks they are performing.
- Create effective reporting systems.
- Monitor the effectiveness of your processes through the use of measurable data, where possible.
- Review and take action to improve in the areas required.
- Plan internal auditing activities.
- Submit your management system documentation for review to ensure it complies with the applicable standard.
- Prepare for review by an external auditor to confirm that the system’s requirements are being satisfied and that the management system is implemented effectively.
- Obtain ISO Certifcaiton
- This periodic on-site review is usually conducted annually.
- It ensures that the certified business continues to comply with Standard requirements, as confirmed during the Recertification Audit at the certification cycle's outset.
- Most are conducted remotely.
Refer to learn more about Types of Audits
