This self-paced course will focus on the procedures of incident reporting such as identifying the factors that contributed to a cyber attack and addressing critical gaps in the most effective manner possible.

Competencies include:

• Identify the key factors in the cyber kill chain
• Identify the four steps in the NIST Incident Response Life Cycle
• Prepare the information required to recover from an incident
• Identify the precursors and indicators of a cyber attack
• Extract and analyze network traffic and event logs
• Conduct interviews with affected users to gather insights 
• Use information gathered from network traffic and log analysis along with interview insights to conduct a root cause analysis to: 
  • Identify gaps in the existing cybersecurity framework and the existing controls that failed 
  • Determine the attack vector, intrusion point, and incident severity
• Identify appropriate measures to address gaps identified
• Prioritize the measures identified to address gaps