top of page
Certified Incident Handler

This latest iteration of EC-Council’s Certified Incident Handler (E|CIH) program has been designed and developed in collaboration with cybersecurity and incident handling and response practitioners across the globe.

It is a comprehensive specialist-level program that imparts knowledge and skills that organizations need to effectively handle post breach consequences by reducing the impact of the incident, from both a financial and a reputational perspective.

Following a rigorous development which included a careful Job Task Analysis (JTA) related to incident handling and incident first responder jobs, EC-Council developed a highly interactive, comprehensive, standards-based, intensive 3-day training program and certification that provides a structured approach to learning real-world incident handling and response requirements.

Professionals interested in pursuing incident handling and response as a career require comprehensive training that not only imparts concepts but also allows them to experience real scenarios. The E|CIH program includes hands-on learning delivered through labs within the training program. True employability after earning a certification can only be achieved when the core of the curricula maps to and is compliant with government and industry-published incident and response frameworks.


E|CIH is a method-driven program that uses a holistic approach to cover vast concepts concerning organizational incident handling and response from preparing and planning the incident handling response process to recovering organizational assets after a security incident.


These concepts are essential for handling and responding to security incidents to protect organizations from future threats or attacks.

Certified Network Defender



Recording & Assignment

Incidents, Events, and Logging




Evidence Gathering & Forensic Analysis



Post-Incident Activities

Global Lack Of Incident Response Planning

To identify a malicious attack

To contain and recover from an attack

Organizations do not have an Incident Response plan

214 days

77 days


74% of the employers rate the difficulty in hiring the skilled IH & R personnel as very high.

Gain Access to new, advanced Labs: The E|CIH Program comes with access to over 50 labs, 800 tools, and 4 OSs.

Compliant with Major Industry Frameworks: 100% Complaint with the NICE 2.0 Framework and the CREST Framework.

Comprehensive Templates Available: A large array of templates, check lists, and cheat sheets.

ECIH Training Options:

bottom of page