Incident Management

Catalog description

The incident management course will teach students how to identify, contain, eradicate, and recover from cybersecurity incidents. This course will focus on industry-recognized practices for creating detections (MITRE ATT&CK), threat emulation (Atomic Red Team), tabletop exercises, and post-incident activities such as lessons learned. Incidents are a key concept in cybersecurity and how incidents are managed is critical to limiting the impact or "blast radius" to the affected entity.