Cyber Security Incident Response and Handling

This course covers the six phases of incident handling and responding as follows:

• Introduction: Includes the definition of an event, incident, as well as the difference between them
• Preparation Phase: Shows the elements of preparation and the team building, 
• Identification Phase:  Demonstrates where identification occurs and the assessment for identification
• Containment: Explains the deployment and categorization needed as well as the short/long- term actions taken
• Eradication: Stresses on restoring systems and improving defenses
• Recovery: Elaborates the validation and monitoring required for attacked systems
• Lessons Learned: Confirms the importance of meeting as a team to fix and improve and to share our experiences with others