Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of Incident Handling
- Comprehending cybersecurity incidents
- Objectives and advantages of effective incident handling
- Incident response standards and frameworks (NIST, ISO, etc.)
The Incident Response Workflow
- Preparation and strategic planning
- Identification and analytical assessment
- Categorisation and prioritisation
Approaches to Containment
- Distinguishing short-term from long-term containment
- Network segmentation and isolation methods
- Liaising with stakeholders and adhering to notification protocols
Removal and System Recovery
- Determining root causes
- Restoring systems and applying patches
- Ongoing monitoring after recovery
Record-Keeping and Reporting
- Best practices for documenting incidents
- Producing actionable post-mortem reports
- Extracting lessons learned and defining metrics for enhancement
Incident Response Tools and Technologies
- SIEM systems and log analysis utilities
- Endpoint detection and response (EDR)
- Automation and orchestration in incident response
Tabletop Drills and Simulations
- Interactive incident scenarios
- Team coordination exercises
- Assessing the effectiveness of responses
Wrap-Up and Future Directions
Requirements
- Fundamental grasp of IT security principles
- Knowledge of network protocols and system administration
- Recognition of common cybersecurity threats and vulnerabilities
Target Audience
- IT security analysts
- Members of incident response teams
- Cybersecurity operations specialists
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.