Course Summary
Credit Type:
Organization's ID:
This examination is offered online through Remote Proctoring Service and onsite at all registered EC-Council Testing Center (ETC) locations around the world.
3 hours
Dates Offered:
Credit Recommendation & Competencies
Level Credits (SH) Subject
Upper-Division Baccalaureate 3 information assurance
Cut score range is 60-85 percent.


The EC-Council Certified Incident Handler (ECIH) exam is a 3-hour exam with 100 multiple-choice questions. The E|CIH exam covers various cybersecurity and IH&R standards, laws, and policies, enabling incident-handling professionals to align their incident handling process in accordance with industry standards.
ECIH maps 100 percent to the NICE framework under the category "Protect and Defend (PR): and the specialty "Incident Response (CIR)". E|CIH maps 100 percent to the CREST Certified Incident Manager (CCIM) framework. It is focused on maintaining an appropriate standard for incident response that determines the path of investigation based on considerable real-world incident handling experience and the pertinent information available. E|CIH maps to CREST Certified level examinations, which are designed to set the benchmark for senior incident handlers. By gaining the ECIH certification, individuals are globally recognized as certified incident handlers.

Skills Measured:

The skills measured by this exam include incident response and handling; process handling; forensics readiness and first response; email security incidents; application level incidents; network and mobile incidents; insider threats; malware incidents; and incidents occurred in a cloud environment.
Instruction & Assessment
Supplemental Materials