ECIHEC-Council Certified Incident Handler
Detect, contain and recover from security incidents, and feed the lessons back into your defenses.
LevelIntermediate2 of 5
Exam2 hours
Valid for3 years
TrackDefense and incident response
What ECIH covers.
ECIH is an incident handling and response certification. The 50-question, 2-hour exam (code 212-89) covers the full incident response lifecycle, from detection through recovery. It is available as an online proctored exam or at Pearson VUE test centres.
Skills you gain
- Detect and classify security incidents accurately
- Conduct thorough incident investigations
- Implement effective containment and recovery procedures
- Create comprehensive incident reports and improve IR processes
Exam domains
- Incident handling fundamentals & frameworks
- Incident detection & classification
- Incident investigation & analysis
- Containment & eradication strategies
- Recovery & lessons learned
- Legal & forensic considerations
Prerequisites
- Basic IT security knowledge
- Understanding of incident response processes
How ordering works.
Send a request
Use the contact page and name the certification you want.
We confirm the details
Our team replies with availability, final price and payment steps.
You receive the voucher
The voucher and booking instructions arrive by email.
Common questions.
How do I schedule the exam?
Booking instructions come with the voucher. Exam slots are booked through EC-Council.
How is the ECIH exam structured?
The ECIH exam runs for 2 hours. Its format and passing score are set by EC-Council; the details for this track are in the description above.
What if I need a retake?
Retake terms are set by EC-Council. If you want a retake option included, mention it when you send your request.
Can I order for a team?
Yes. Send the number of seats and the certifications you need, and we reply with one quote.
ECIH voucher, $388.
Request it now, or compare the other EC-Council certifications first.