CSIRM
Cyber Security & Incident Response for managers
Cyber Security & Incident Response for managers is a course specifically aimed at meeting the ever- growing need to develop knowledge in Incident response aspects, methodologies and procedures for decision makers and managers
40 Hours
Cloud Environment
Instructor Led
Virtual Labs & Simulation
In this course, students will gain an introduction to Incident Response, learn how to handle common security incidents, prepare a cyber security response plan, lead an investigation process, work by common standards like NIST & MITRE Attack and get familiar with risk assessment framework for organizations.
WHO IS IT FOR
Security and IT decision makers
CISO and security managers
SOC and security Managers
System administrators
Incident responders and team leaders
GOALS
Understand the Incident Response plan & methodologies.
Execute security preparation plan.
Get familiar with Detection, Identification and containing of the most common cybersecurity incidents.
Understand Risk Management concepts and terminology.
Learn about the NIST Risk Management Framework (NIST-RMF).
Requirements
IT background
Knowledge of Monitoring & Security devices
- Types of SOCs and their Operational Models
- Analysts Roles in SOCs
- SOCs and the Business
- Introduction to SIEM operations
- Understanding Logs and Log Collection
- Workflow (Collection, Correlation, Alerting and Querying)
- Introduction to Automation
- Methodological Approach to Incident Response (NIST)
- Incident Response Lifecycle
- Alerts creation (Detection)
- Querying events data (Discovery)
- The role of digital forensics in IR
- The Process of digital forensics investigations
- How can CTI support IT
- Fundamentals of threat intelligence gathering and analysis
- Practicing online and offline tools
- Overviewing the Framework
- Initiation of Organizational Preparations
- Business Stakeholders and Assets
- Preparing the System
- Categorizing the System
- Preparing for a System Risk Assessment
- Use Case + Practice
16 Hours of hands-on activities
Total amount of practical experience during this course.