ECIHEC Council Certified Incident Handler

What is ECIH?

The ECIH certifies structured handling of security incidents. The exam follows the incident handling process from preparation through triage, evidence gathering and forensic analysis, containment, eradication and recovery, to recording, notification and post-incident activities. It covers incidents involving malware, email, networks, web applications, cloud environments and insider threats, as well as endpoint incidents. According to the provider it addresses incident handlers, response team and SOC analysts, forensic investigators, and security professionals with at least one year of experience. The certification is ANAB-accredited and recognised under the US DoD 8140 directive.

Quick facts

Cost, prerequisites, exam & renewal

CertMap score and matching roles

Rating

Matching NICE roles

What are NICE roles? The framework explained →

More certifications

From EC-Council

CASEEC Council Certified Application Security Engineer (.NET or Java)CCISOEC Council Certified Information Security OfficerCEHEC Council Certified Ethical HackerCHFIEC Council Computer Hacking Forensics InvestigatorCNDEC Council Certified Network DefenderCNDAEC Council Certified Network Defense Architect

In Security Operations

CCOACertified Cybersecurity Operations AnalystCHFIEC Council Computer Hacking Forensics InvestigatorCNDEC Council Certified Network DefenderCSAEC Council Certified SOC AnalystCSCUEC Council Certified Secure Computer UserCTIAEC Council Certified Threat intelligence Analyst