Get in Touch
 Duration 21 hours

Course Outline

Introduction to Incident Handling

  • Understanding the nature of cybersecurity incidents
  • Objectives and advantages of structured incident handling
  • Incident response standards and frameworks (NIST, ISO, etc.)

Incident Response Process

  • Preparation and strategic planning
  • Detection mechanisms and analysis
  • Classification and priority assessment

Containment Strategies

  • Distinguishing between short-term and long-term containment
  • Techniques for network segmentation and isolation
  • Stakeholder coordination and notification protocols

Eradication and Recovery

  • Identifying underlying root causes
  • System restoration and patching processes
  • Ongoing monitoring after recovery

Documentation and Reporting

  • Best practices for incident documentation
  • Creating actionable post-mortem reports
  • Extracting lessons learned and defining improvement metrics

Incident Response Tools and Technologies

  • SIEM systems and log analysis utilities
  • Endpoint detection and response (EDR) solutions
  • Automation and orchestration in IR

Tabletop Exercises and Simulations

  • Interactive incident scenarios
  • Team coordination drills
  • Evaluating the effectiveness of responses

Summary and Next Steps

Requirements

  • Fundamental knowledge of IT security principles
  • Proficiency with network protocols and system administration tasks
  • General awareness of cybersecurity threats and system vulnerabilities

Target Audience

  • IT security analysts
  • Members of incident response teams
  • Cybersecurity operations specialists

Number of participants


Price per participant (excl. VAT)

Testimonials (2)

Upcoming Courses

Related Categories