7 Topics
5 Days
35 Sessions
Programme Overview
Training Description
.
- Cloud Security Professionals
- Security Architects
- Chief Information Security Officers (CISOs)
- Chief Information Officers (CIOs)
- IT Risk and Governance Professionals
- Business Continuity Managers
- Disaster Recovery Professionals
- Enterprise Risk Managers
- Crisis Management Professionals
- Compliance and Data Protection Officers
- Legal and Regulatory Professionals involved in cyber incidents
- Crisis Communication and Public Relations Professionals
- Senior executives responsible for cybersecurity governance, incident response, business continuity, digital risk, crisis management, and organizational resilience.
Session Objectives
- Analyze regional and international frameworks for cooperative crisis management. Enhance cross-border communication and information-sharing mechanisms. Apply best practices in early warning systems and joint preparedness. Strengthen institutional capacity for coordinated crisis response. Design strategies for managing transboundary health emergencies and pandemics.
About the Course
Mastering Cybersecurity Crisis & Incident Response is an advanced training course designed to equip cybersecurity professionals, IT leaders, risk managers, incident responders, and organizational decision-makers with the skills required to detect, contain, manage, investigate, and recover from major cybersecurity incidents and cyber-enabled crises.
Key areas include incident response planning, cyber crisis management, threat intelligence, incident triage, digital forensics, malware and ransomware response, data breach management, network security incidents, identity compromise, cloud security incidents, crisis communication, evidence preservation, business continuity, disaster recovery, and post-incident lessons learned.
The course emphasizes the integration of technical cybersecurity response with strategic crisis leadership, helping participants understand how Security Operations Centres (SOCs), IT teams, executives, legal and compliance functions, communications teams, law enforcement, regulators, and external cybersecurity partners can work together during high-impact incidents.
Curriculum & Topics
7 Topics | 35 Sessions
-
Workshop 1.1:
Types of cyber incidents: malware, phishing, DDoS, insider threats
-
Workshop 1.2:
Current global cyber threat landscape and trends
-
Workshop 1.3:
Understanding cyber risk in the context of crisis management
-
Workshop 1.4:
Critical impacts on business operations and national security
-
Workshop 1.5:
Overview of high-profile cyber crises and response lessons
-
Workshop 2.1:
Establishing detection baselines and thresholds
-
Workshop 2.2:
Tools for real-time threat monitoring and log analysis
-
Workshop 2.3:
Security Information and Event Management (SIEM) platforms
-
Workshop 2.4:
Integrating threat intelligence feeds and automation
-
Workshop 2.5:
Escalation criteria and early warning indicators
-
Workshop 3.1:
Core components of a cybersecurity incident response plan
-
Workshop 3.2:
Defining roles, responsibilities, and escalation pathways
-
Workshop 3.3:
Establishing and activating the Incident Response Team (IRT)
-
Workshop 3.4:
Coordinating containment, eradication, and recovery phases
-
Workshop 3.5:
Maintaining response readiness and continuous improvement
-
Workshop 4.1:
Chain of custody and evidence preservation
-
Workshop 4.2:
Forensic tools for endpoint and network analysis
-
Workshop 4.3:
Analyzing logs, memory dumps, and system images
-
Workshop 4.4:
Identifying attack vectors and threat actors
-
Workshop 4.5:
Reporting and documentation for legal and compliance purposes
-
Workshop 5.1:
Crafting internal and external communications during cyber crises
-
Workshop 5.2:
Media handling and reputation protection in data breach scenarios
-
Workshop 5.3:
Coordination with regulators, clients, and partners
-
Workshop 5.4:
Managing misinformation and social media exposure
-
Workshop 5.5:
Pre-approved messaging templates and spokesperson protocols
-
Workshop 6.1:
Linking cybersecurity with business continuity planning
-
Workshop 6.2:
Backup systems and disaster recovery strategies
-
Workshop 6.3:
Minimizing downtime and restoring mission-critical services
-
Workshop 6.4:
Conducting impact assessments and prioritizing assets
-
Workshop 6.5:
Testing response plans through tabletop and live simulations
-
Workshop 7.1:
Aligning with NIST, ISO/IEC 27035, and GDPR frameworks
-
Workshop 7.2:
Legal implications of data breaches and incident disclosures
-
Workshop 7.3:
Cybersecurity roles in enterprise risk management
-
Workshop 7.4:
Building a culture of cyber resilience
-
Workshop 7.5:
Institutionalizing lessons learned and updating response protocols
