3234 - Session-based subject
Incident Response and Investigations
Learn to identify, analyze, and minimize the costs of a cyber attack or an ongoing incident through risk reduction measures.
Incident response (IR) is an approach to handling various categories of security incidents, cyber threats, and data leakage. The incident response methodology aims to identify, analyze, and minimize the cost of a cyberattack or a live incident by mitigation techniques. A well-designed IR plan can fix a potential vulnerability to prevent future attacks and propagation of the attacks. The response is a part of incident handling, which looks at the logistics, communications, synchronicity, and planning required to resolve an incident. This course includes investigation, reporting, analysis, and response.
Learning outcomes
Upon completion of this course, the students will be ready to deal with real security incidents. They will possess the capability to establish an intuitive and customizable system for incident management in initial response statistics. Additionally, they will be able to use accurately reported information and details of the incident to provide a proper response. With a solid understanding of the incident response process, the student will be able to act accordingly. They will apply the NIST's phases of the incident response lifecycle and effectively utilize the steps of an incident response plan. Furthermore, they will demonstrate the ability to determine the critical components of the network and identify points of failures in order to address them appropriately. Ultimately, the student will be able to form a comprehensive cyber security incident response plan.