Course Outline

Introduction to Incident Handling

  • Understanding cybersecurity incidents
  • Goals and benefits of incident handling
  • Incident response standards and frameworks (NIST, ISO, etc.)

Incident Response Process

  • Preparation and planning
  • Detection and analysis
  • Classification and prioritization

Containment Strategies

  • Short-term vs long-term containment
  • Network segmentation and isolation techniques
  • Coordination with stakeholders and notification protocols

Eradication and Recovery

  • Identifying root causes
  • System restoration and patching
  • Monitoring post-recovery

Documentation and Reporting

  • Incident documentation best practices
  • Generating actionable post-mortem reports
  • Lessons learned and metrics for improvement

Incident Response Tools and Technologies

  • SIEM systems and log analysis tools
  • Endpoint detection and response (EDR)
  • Automation and orchestration in IR

Tabletop Exercises and Simulations

  • Interactive incident scenarios
  • Team coordination drills
  • Evaluating response effectiveness

Summary and Next Steps

Requirements

  • Basic understanding of IT security concepts
  • Familiarity with network protocols and system administration
  • Awareness of cybersecurity threats and vulnerabilities

Audience

  • IT security analysts
  • Incident response team members
  • Cybersecurity operations professionals
 21 Hours

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 4800 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (5)

Upcoming Courses

Related Categories