Certified Incident Handler (ECIH)

Certified Incident Handler (ECIH)

The Certified Incident Handler (ECIH) certification covers the essential skills and knowledge required for incident response and management.

Focus

The Certified Incident Handler (ECIH) certification focuses on incident handling, management, and resolution

Exam Duration

The Certified Incident Handler (ECIH) exam duration is 120 minutes

Num of Question

The exam contains a total of 40 questions

Exam Fee

The exam fee is $200-$300 USD.

Exam Validity

The CCRN-Pediatric certification is valid for EC-Council certification exams are valid for 3 years.

Prior Certification

• No prior certification is required

Exam Format

The Certified Incident Handler (ECIH) exam is a Multiple-choice questions (40 items)

Passing Conditions

To pass Certified Incident Handler (ECIH) exam, applicants must achieve a minimum score of Passing score: 70% or higher

Who Should Take

The ECIH certification is designed for incident handlers, chief information security officers (CISOs), chief information officers (CIOs), and individuals working in incident response and management.

• Incident handler
• Chief Information Security Officer (CISO)
• Chief Information Officer (CIO)
• Security consultant
• IT professional

Prerequisites

No prior work experience is required

Or can substitute with certifications:

• ECIH course completion
• CFIR (Certified Forensic Incident Response) certification
• CND (Certified Network Defender) certification

Certification Process

• Step 01: Complete the ECIH course or have equivalent knowledge in incident handling
• Step 02: Meet the prerequisites and register for the certification exam
• Step 03: Pass the certification exam with a score of 70% or higher

Domains with Weights

• Domain 1: Incident Response and Management (30%): This domain covers the essential skills and knowledge required for incident response and management, including incident classification, containment, eradication, recovery, and lessons learned.
• Domain 2: Threat Analysis and Management (25%): This domain covers the skills and knowledge required for threat analysis and management, including threat intelligence, threat modeling, and threat mitigation.
• Domain 3: Incident Handling and Response (20%): This domain covers the essential skills and knowledge required for incident handling and response, including incident classification, containment, eradication, recovery, and lessons learned.
• Domain 4: Security Operations and Management (25%): This domain covers the skills and knowledge required for security operations and management, including security Policies, incident response plans, and security team management.