Certified Incident Handler (ECIH)

What is an Incident Handler?

An Incident Handler is responsible for identifying, analyzing, and correcting hazards to prevent future reoccurrence.

Within structured organizations, incidents are typically managed by either:

• An Incident Response Team (IRT), or
• An Incident Management Team (IMT)

These teams may be designated beforehand or during the event, and they take control of the organization’s response to ensure business continuity while the incident is being resolved.

About the ECIH Certification

The EC-Council Certified Incident Handler (ECIH) certification provides the fundamental skills required to handle and respond to computer security incidents in an information system.

A Certified Incident Handler is trained to:

• Handle various types of incidents
• Apply risk assessment methodologies
• Understand laws and policies related to incident handling
• Create incident handling and response policies
• Respond to different types of computer security incidents such as:
  • Network security incidents
  • Malicious code incidents
  • Insider attack threats

The ECIH certification gives professionals industry recognition as skilled and trusted incident handlers.

Certification Target Audience

This certification benefits:

• Incident Handlers
• Risk Assessment Administrators
• Penetration Testers
• Cyber Forensic Investigators
• Vulnerability Assessment Auditors
• System Administrators and System Engineers
• Firewall Administrators
• Network Managers
• IT Managers and IT Professionals
• Anyone interested in incident handling and response

ECIH Exam Information

• Exam Code: Prefix 212-89
• Duration: 3 hours
• Questions: 100
• Availability: ECC Exam Centers

Passing Criteria

• EC-Council exams are offered in multiple forms (different question banks).
• Each form is tested and validated with a sample group under the supervision of subject matter experts.
• Questions are given a difficulty rating, contributing to the overall “Cut Score.”
• Cut scores are set per exam form.

Passing range: 60% – 85% (depending on the exam form)

Age Requirements and Policies Concerning Minors

• Minors may take the exam only with:
  • A written consent/indemnity letter signed by a parent or legal guardian
  • A supporting letter from a nationally accredited institution of learning
• Minor/adult legal ages are defined by the candidate’s country of residence/origin.
• For clarification or submissions, contact: certmanager@eccouncil.org

Disclaimer

• EC-Council reserves the right to impose additional restrictions to comply with policy.
• EC-Council reserves the right to modify certification policies without notice.
• EC-Council reserves the right to revoke certification in case of non-compliance.