The ISO/IEC 27035 standard covers the following key content:

ISO/IEC 27035-1: Elaborates on the basic concepts, principles, and main operational steps of information security incident management, guiding organizations to establish a standardized process to deal with various information security incidents.

ISO/IEC 27035-2: Provides guidelines for organizations to formulate incident response plans and prepare, based on the incident management phases described in ISO/IEC 27035-1, with particular emphasis on planning and preparatory work, as well as experience accumulated from incidents.

The purpose of ISO/IEC 27035 system certification is to ensure that organizations can establish and maintain an effective information security incident management system to cope with the constantly changing cyber threats and challenges.