Incident Response 101 + 102

With cybersecurity incidents becoming more prevalent across the globe, it is now a matter of when not if something will occur. Our training will help you understand the phases that are normally part of an incident and what role you would likely need to play according to your organisation's response plan (you know where yours is and test it regularly right?). Equip yourself with the knowledge you need to help reduce the impact of a cyberattack.

The first half of the session covers a simulated fictitious incident where teams need to work together to resolve an incident as quickly as possible. This provides participants the opportunity to gain first-hand experience of key concepts in an incident, with multiple repetitions through it to help to solidify core concepts.

The second half of the session builds on these core concepts and iteratively covers what your incident response plan should include through the use of multiple tabletop scenarios, teasing out the common things that you should have in place (for example contact lists, copies of documentation, pre-approved decisions and perhaps even out-of-band comms channels).

This training prepares teams with the foundational knowledge of how people may respond under pressure, setting the groundwork for a common language and understanding before moving to more advanced exercises (e.g. functional tabletop exercises, purple teaming). It also covers each phase of the NIST Incident Response Lifecycle.

Intended audience: Anyone who has an interest in incident response or has never been in a cybersecurity incident. Technical skills not required.

Further information: see our IR Training page on our website.

Note you will be asked about dietary requirements on the order page for morning/afternoon breaks and lunch.  Tea and coffee will be available throughout the session.