This course covers incident response methods and procedures are taught in alignment with industry frameworks such as US-CERT’s NCISP (National Cyber Incident Response Plan), and Presidential Policy Directive (PPD) 41 on Cyber Incident Coordination Policy. It is ideal for candidates who have been tasked with managing compliance with state legislation and other regulatory requirements regarding incident response, and for executing standardized responses to such incidents. The course introduces procedures and resources to comply with legislative requirements regarding incident response.

Course Objectives

In this course, you will understand, assess and respond to security threats and operate a system and network security analysis platform. You will:

  • Explain the importance of best practices in preparation for incident response
  • Given a scenario, execute the incident response process
  • Explain general mitigation methods and devices
  • Assess and comply with current incident response requirements.

Target Student

This course is designed primarily for IT leaders and company executives who are responsible for complying with incident response legislation. This course focuses on the knowledge, resources, and skills necessary to comply with incident response and incident handling process requirements.


General understanding of cybersecurity concepts

Course Content:

  1. 1
    • The Importance of Risk Management

    • Integrating Documentation into Risk Management

  2. 2
    • Deployment of Incident Handling and Response Architecture

    • Containment and Mitigation of Incidents

    • Preparation for Forensic Investigation as a CSIRT

  3. 3
    • Use a Forensic Investigation Plan

    • Securely Collect and Analyze Electronic Evidence

    • Follow Up on the Results of an Investigation

  4. 4
    • Examples of Legislation GDPR, HIPPA, Elections

    • Case study: Incident Response and GDPR

    • State Legislation Resources and Example

    • Using NYS as an example

For More Information, Call (714) 505-3475

or email us at