---
title: "CIR Standard Appendix 9: ISO 27035"
description: "CIR Standard Appendix 9: ISO 27035"
image: https://blog.bcm-institute.org/hubfs/Manager%20Guide%20to%20BCM%20for%20Cyber%20Security%20Incidents/C11%20Appendix%201%20ISO%2022301/C11%20Morepost/IC_CIR_ISO_ISO27035.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Cybersecurity Series
# CIR Standard Appendix 9: ISO 27035
ISO 27035 covers guidelines (ISO/IEC 27035, 2016) for planning and preparing for incident response. Incident management is a crucial component of building cyber resiliency within an organization.
Although mitigation may be in place to prevent cyber security attacks, organizations have to be prepared to respond quickly and effectively when sophisticated attacks can pass the preventive controls.
Reference: Chapter 19 Appendix 9: ISO 27035
[Moh Heng Goh](https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh) Nov 28, 2022
### CIR Related Standards
#### ISO 27035
#### 18.1 Introduction
ISO 27035 covers guidelines (ISO/IEC 27035, 2016) for planning and preparing for incident response. Incident management is a crucial component to build cyber resiliency within an organisation. Although mitigation may be in place to prevent cyber security attacks, organisations have to be prepared to respond quickly and effectively when sophisticated attacks can pass the preventive controls. The previous standards focused more on the proactive side of cyber security management, whereas this standard covers more of the reactive component.
#### 19.2 Scope
The planning and preparation cover:
- Develop information security incident management policies;
- Acquire top management commitment;
- Update information security policies at corporate and system, service and network levels;
- Develop information security incident management plan;
- Establish incident response team;
- Establish relationships and connections with internal and external organisations;
- Acquire technical, organisational, operational and other support;
- Conduct information security incident management awareness briefings and training; and
- Test information security incident management plan.
#### 19.3 Processes
ISO 27035 consists of best practices (IT Governance, 2016) for information security incident management. It provides organisations with a framework to:
- Detect, report and assess information security incidents;
- Respond to and manage information security incidents;
- Detect, assess and manage information security vulnerabilities; and
- Improve information security and incident management continually through management of information security incidents and vulnerabilities
##### ISO Standards Related to CIR
| **ISO22301** | **ISO27000 Family** | **ISO27001** | | | |
| --- | --- | --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/14e6f1f5-222a-4cba-adbd-41ff2e97c5bc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a40d6190-1657-4fba-837c-8ad84b938177) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/560377de-1598-473c-8419-ea5ac3e69f3d) | | | |
| | | | | | |
| | | | | | |
---
#### 
#### Do You Want to Continue BCM Training onsite or online?
| **Competency-based Course** | **Certification Course** | | |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/685c93a7-08d2-4175-bee7-71781494334e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/95fc21bd-88bf-43d8-9464-5b00190d76e0) | [![\[BL-3-Catalog\] What Specialist Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c) | [![\[BL-5-Catalog\] What Expert Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478) |
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2a55f179-a251-4490-bd1c-856467aea198)
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Reference: Chapter 19 Appendix 9: ISO 27035
Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket \[X-X\] cross-refers to the actual chapter and section in the 1st Edition.
**Comments:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh"
},
"dateModified" : "2022-11-28T12:28:57.356Z",
"datePublished" : "2022-11-28T12:28:57.000Z",
"headline" : "CIR Standard Appendix 9: ISO 27035",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cyber-security/cir-standards-template-0-0-0-0-0-0-0-0",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```