1. What Is Incident Management and Why Is It Important?
Welcome to the course: Course overview
()
Welcome and course goals
()
Key terminology and acronyms
()
IT Service Management
()
Importance of an IT Service Management solution
()
2. Importance of a Mature IT Service Management Solution
What defines a mature IT Service Management (ITSM) solution?
()
Importance of preparation and planning
()
ITIL incident, major incident, and problem management
()
3. Justifying the Effort and Cost
Cost savings from preventing cyber attacks
()
Non-monetary impact on the business
()
Understanding ROI for cybersecurity investments
()
4. SANS Framework Six-Step Process
Module introduction
()
SANS Institute Incident Response (IR) framework
()
Preparation and identification
()
Containment and eradication
()
Recovery and lessons learned
()
Third-party supply chain incident management
()
5. NIST SP 800-61r3 Incident Response Recommendations and Considerations for Cybersecurity Risk Management
What is NIST SP 800-61?
()
Preparation
()
Incident response
()
Lessons learned
()
6. Documentation Management Frameworks
Document management standards
()
Creation, storage, and tracking of documents
()
Monitoring and maintenance processes and procedure
()
7. Defining a Major Incident
Module introduction
()
CIRP templates
()
Gathering the right people for the team
()
Defining the trigger for a major incident process
()
8. Building a Cyber Incident Response Plan (CIRP)
Planning for identification phase
()
Planning for response
()
Planning for lessons learned
()
9. Post-Implementation Review Process
Cost savings from preventing cyber attacks
()
Non-monetary impact on the business
()
Understanding ROI for cybersecurity investments
()
10. Implementing the Process
Module introduction
()
Making the process available
()
Communicating the process
()
Training staff
()
11. Testing the Plan
Simulating an incident
()
Advanced simulations
()
Measuring simulation success
()
12. Review, Maintain, and Improve
Continuous process improvement
()
Creating a review schedule
()
System architecture involvement
()
Outro: Course wrap-up
()
Ex_Files_Incident_Response_Frameworks.zip
(479 KB)