What did we learn?
That's a wrap for now; but don't lose your passion for learning every day.
What we learned
We've brought you safely through the Incident Response Course.
A quick recap of the places we visited and practiced:
- The NIST/SANS Incident Response Framework
- What a Security Incident Is and How It's Classified
- Roles and Responsibilities of the Response Team
- Classifying Incident Severity and Impact
- Building Response Plans and Runbooks
- Tools for Early Incident Detection
- Eradicating the Incident's Root Cause
- Short- and Long-Term Containment Strategies
- Secure System Recovery Procedures
- Internal Communication during an Active Incident
- Coordinating with Legal, Communications and External Providers
- Notifying Authorities and Affected Parties
- Updating Plans and Controls Based on Lessons Learned
- Writing the Post-Incident Report
- Identifying Gaps in the Response Process
Support us
Learn the ways to support the projects at no cost: Together we are more
Thank you so much for joining us on this journey 🤘🏽