EC-Council Certified Incident Handler (E|CIH v3) (212-89)

The EC-Council Certified Incident Handler (E|CIHv2)
certification program is a specialist-level professional training designed to equip
cybersecurity professionals with advanced knowledge and practical skills in
effectively managing and responding to security incidents. Developed in
collaboration with industry experts, the program offers a methodical, hands-on
approach that covers every stage of the Incident Handling and Response (IH&R)
process — from preparation and detection to containment, eradication, recovery, and
post-incident activities.
E|CIHv2 prepares candidates to handle real-world incident scenarios such as
malware attacks, email and network breaches, web application compromises, cloud
security incidents, and insider threats. The program emphasizes forensic readiness,
first response procedures, and compliance with industry frameworks such as NICE
and CREST. Candidates gain access to over 50 labs, 800 tools, and multiple
operating systems, simulating real-time environments that build critical decision-
making and technical capabilities.
By combining theory with intensive practical exercises, including evidence collection
and analysis, threat actor behavior decoding, and automated incident response
orchestration, E|CIHv2 prepares incident handlers to reduce the impact of security
breaches on an organization’s assets and reputation. It is ideal for mid to high-level
cybersecurity professionals aiming to excel in incident handling, incident response,
or SOC roles globally.

Google 4.4/5 Average Rating
1,150+ Learners
Industry Recognized
Certification Body EC-Council
Delivery Profice
Lowest price guaranteed
iLearn (Self-paced: E-learning) + exam -30%
€940 €658
Excl. VAT Save €282 · 30% off
See price
Live course + exam
€2000
Excl. VAT
See price
  • Exam voucher
  • Hands-on labs
  • Certificate
  • Lifetime support
  • Official courseware

Flexible payment — invoice, card or PayPal

Course Information

Course Code 212-89
Duration 3 Days
Delivery Online Live, I Learning
Exam Voucher Included

What You Will Learn

Master the complete Incident Handling and Response (IH&R) lifecycle, including preparation, detection, validation, escalation, containment, eradication, recovery, and post-incident reporting.
Develop hands-on expertise in managing diverse security incidents, including malware, network, email, web application, cloud, and insider threats, using real-world lab scenarios.
Understand forensic readiness and first response principles, including evidence acquisition, handling volatile and static data, and applying anti- forensics countermeasures.
Learn to apply structured methodologies, frameworks, standards, and regulations in the incident handling process for improved compliance and effectiveness.
Gain proficiency in using advanced incident handling tools and techniques, including forensic investigation, threat intelligence integration, and automated response solutions.
Build skills in developing comprehensive incident response plans, threat actor profiling, and delivering actionable reports to stakeholders to enhance organizational security posture.

Course Curriculum

Get the Full Syllabus as a PDF

Curriculum, exam format & everything included — sent straight to your inbox.

All You Need to Know

Who Should Attend

The course is designed for Incident Handlers, Risk Assessment Administrators, Cyber ​​Forensics Investigators, Vulnerability Assessment Auditors, and Network Administrators.

Prerequisites

It is recommended that you obtain the CEH – Certified Ethical Hacker and CND – Certified Network Defender certifications beforehand.

Course Materials

E|CIH Instructor-led live online package includes:

  • Live online instructor-led training with Master Trainer
  • One year access to training videos from master trainer
  • Six months access to ilabs
  • One year access to ecourseware
  • Exam voucher
  • Certificate of completion

 

E|CIH iLearn package includes:

  • One year access to training videos from master trainer
  • Six months access to ilabs
  • One year access to ecourseware
  • Exam voucher
  • Certificate of completion
Examination

This course prepares you to take the ANSI-accredited EC-Council Certified Incident Handler 212-89 exam. The course fee includes a Pearson Vue exam voucher.

What Our Learners Say

Career Opportunities After Cybersecurity Training

An incident response analyst detects, contains and recovers from cyberattacks. ECIH builds the structured, full-lifecycle response skills employers need.

Hiring Companies

IBM Deloitte Mandiant Accenture

Average Salary

£38k Min
£55k Average
£78k Max

Frequently Asked Questions

Exam code 212-89 (ECIH v3).

EC-Council recommends around 1 year of information security experience, though this can typically be met through official training.

Incident responders, SOC analysts, and IT/security professionals responsible for managing security incidents.

Yes — the course follows structured, industry-recognised incident handling processes covering the full incident lifecycle.

CSA focuses on SOC monitoring and detection, while ECIH focuses on what happens next — containing, eradicating, and recovering from confirmed incidents.

Premium training, now at the lowest price.

Lowest price guaranteed
Live course + exam €2000 excl. VAT
See price
4.4/5 rating Official EC-Council partner Exam included 1,150+ alumni
Ready to enrol?

No payment now — reserve your seat and we'll send the invoice.

Under a minute · invoice, card or PayPal
1 Submit your details
2 Receive your invoice
3 Pay & get access