Duration
1 day
Outline
- Common Terminologies
- Data Classification
- Information as Business Asset
- Computer Security Incident
- Types of Computer Security Incidents
- Incident Response
- Signs of an Incident
- Incident Categories
- Incident Reporting
- Incident Reporting Organizations
- Incident Handling and Response Process
- Step 1: Preparation for Incident Handling and Response
- Step 2: Detection and Analysis
- Step 3: Classification and Prioritization
- Step 4: Notification and Planning
- Step 5: Containment
- Step 6: Forensic Investigation
- Step 7: Eradication and Recovery
- Step 8: Post-Incident Activities
- CSIRT Overview
- Need for CSIRT
- CSIRT Steps to Handle Cases
- Best Practices for Creating a CSIRT
- CERT
- World CERTs
- GFIRST
- FIRST
Programme scope, delivery arrangements and suitability are confirmed during enquiry.