Skip to content
EC-Council

EC-Council Certified Incident Handler (ECIH)

Format

Self-paced (eLearning)

Vendor

EC-Council

Course Price

$1,399

Enrollment opens a secure Stripe checkout.

EC-Council Certified Incident Handler (ECIH)

Overview

Study a structured incident handling and response process with EC-Council’s ECIH program. Connect preparation and triage with containment, evidence handling, recovery, and improvement across common security incidents.

This AuditHive offering uses self-paced EC-Council iLearn training. Complete the learning on your own schedule and use website checkout to complete and confirm enrollment.

Check the official course provider course and credential requirements for the current syllabus, exam and certification criteria.

Curriculum

  1. Getting started

    • Review the course structure and relevant foundation concepts.
    • Plan time for independent study and practical work.
  2. Fundamentals of Incident Handling and Response

    • Introduction to Incident Handling and Response
    • Incident Handling and Response Process
    • Handling and Responding to Malware Incidents
    • Handling and Responding to Email Security Incidents
  3. Handling Network and Web Application Security Incidents

    • Handling and Responding to Network Security Incidents
    • Handling and Responding to Web Application Security Incidents
    • Handling and Responding to Cloud Security Incidents
    • Hands-on Lab: Simulated Network Breach and Remediation
  4. Insider Threats, Response Planning, and Exam Preparation

    • Handling and Responding to Insider Threats
    • Building an Effective Incident Response Team (IRT)
    • Final Hands-on Incident Response Drill
    • ECIH Certification Exam Readiness Review

Who Should Attend & Prerequisites

Who should attend

This course is ideal for security analysts, incident response professionals, SOC (Security Operations Center) analysts, IT administrators, and anyone responsible for handling and mitigating cybersecurity incidents.

Prerequisites

Familiarity with cybersecurity concepts, networks, and operating systems is recommended. Security operations or IT administration experience will help you apply the incident scenarios. Review EC-Council’s current eligibility rules for your training route before scheduling the exam.

Learning Outcomes

  • Organize incident preparation, validation, escalation, and response.
  • Recognize evidence-handling needs during incident investigations.
  • Connect recovery and lessons learned with improvements to response readiness.

Exam and credential requirements

The ECIH credential requires passing its examination and meeting the applicable eligibility rules. Exam results depend on your preparation and performance; the course does not guarantee a passing result. Renewal and continuing education requirements are set by EC-Council and depend on the credential.

What's Included

  • Self-paced EC-Council iLearn training
  • Official digital course materials
  • The course examination voucher, subject to applicable eligibility requirements

Confirm the assigned course version, access period, practical resources, and voucher terms in your enrollment information. Contact training@auditpartners.com before checkout if you need a specific access period or package feature.