EC-Council Certified Incident Handler (ECIH)

This latest iteration of EC-Council’s Certified Incident Handler (E|CIH) program has been designed and developed in collaboration with cybersecurity and incident handling and response practitioners across the globe.

It is a comprehensive specialist-level program that imparts knowledge and skills that organizations need to effectively handle post-breach consequences by reducing the impact of the incident, from both a financial and a reputational perspective.

Following a rigorous development which included a careful Job Task Analysis (JTA) related to incident handling and incident first responder jobs, EC-Council developed a highly interactive, comprehensive, standards-based, intensive 3-day training program and certification that provides a structured approach to learning real-world incident handling and response requirements.

Course Content

Lessons Status

ECIH - Module 01 Introduction to Incident Handling and Response


ECIH - Module 02 Incident Handling and Response Process


ECIH - Module 03 Forensic Readiness and First Response


ECIH - Module 04 Handling and Responding to Malware Incidents


ECIH - Module 05 Handling and Responding to Email Security Incidents


ECIH - Module 06 Handling and Responding to Network Security Incidents


ECIH - Module 07 Handling and Responding to Web Application Security Incidents


ECIH - Module 08 Handling and Responding to Cloud Security Incidents


ECIH - Module 09 Handling and Responding to Insider Threats