Incident Response Course

What is this course for?

Playbooks, containment, eradication and lessons learned.

🚀 Incident Response Fundamentals: Learn the NIST/SANS frameworks and the roles of the response team.
🚀 Preparation and Detection: Write runbooks and detect incidents early.
🚀 Containment, Eradication and Recovery: Apply containment, eradication and secure recovery strategies.
🚀 Communication and Coordination: Coordinate internal, legal and authority communication during an incident.
🚀 Lessons Learned and Continuous Improvement: Write the post-incident report and update plans with what was learned.

With this course you'll create, optimize, automate or improve the following projects:

🚀 You'll develop incident response playbooks with digital forensics and threat intelligence.


Course	Incident Response Course
Learning path	CyberGuardián
Domain	ADR — Cybersecurity Analysis, Detection and Response
Level	Advanced
Aimed at	Organizational security specialists and leads
Prerequisites	We recommend completing the CyberUsuario learning path first
Format	Online, self-paced
Language	Spanish (English translation available)
Modules	5
Lessons	15
Estimated reading time	~10 minutes (not counting practice or assessment)
Material	Text lessons and a downloadable course diagram (Excalidraw)
Content access	Free: open, open-source content (MIT license)
Assessment	Online, 60 minutes, at least 80% correct answers, 2 attempts. Requires a subscription
Diploma	Yes, when you take the assessment on the DivisionCero platform
Certification	Included in the diploma, verifiable online with a QR code or certification code
Learning path certification	Counts toward the ADR domain certification and CyberGuardián Certified
Last updated	19/09/2026
Course link	cyberacademy.divisioncero.com/adr/respuesta-a-incidentes

Open, open-source content on CyberAcademy.