Cybersecurity Incident Management - Tabletop Exercise

Awareness and basic knowledge within the scope of the courses listed in the Previous courses and Related courses
sections

• Incident management according to the American NIST 800-61
• Incident life cycle
• Roles of employees and their responsibilities
• Policies, processes and procedures in general
• Incident preparation
• Detection and security awareness (detection, awareness)
• Tasks of individual workers and users (roles and responsibilities)
• Internal incident reporting (communication)
• Initial incident analysis and response (identification, analysis)
• Communication within the organization, asset and risk guarantors, management (communication, owners, governance)
• (Pre)approval of interventions and procedures during the incident (notification, response)
• Prevention of further spread (containment)
• Mitigation (mitigation)
• Eradication and cleaning of the infection (eradication)
• Reporting to authorities (reporting)
• Recovery and return to operation (recovery)
• Prevention of recurrence (remediation)
• Lessons learned from the crisis development (lessons learned) learned)

Previous courses

CompTIA Security+ [CTSEC]

CISSP - Certified Information Systems Security Professional [CISSP]

Next courses

Windows Server - Auditing Security According to ISO/IEC 27001 and ISO/IEC 27002 version 2022 [GOC169]

Risk management based on CSN/ISO/IEC 27005 [GOC241]

Microsoft Azure - hacking and pentesting [GOC238]

NIS2 - Network and Information Security 2 [GOC240]

Microsoft 365 Defender - configuration, management, and incident detection [GOC250]