Incident Response Management

Catalog description

This course will explain the core components of creating a successful Computer Security Incident Response Plan (CSIRP) and maintaining it in response to changes at the organization. It will also detail how a well-maintained CSIRP can mitigate and offset the losses to an organization and lessen their legal liabilities in the event of a breach. The student will learn the hardware and software resources that exist to assist organizations in preventing incidents, and that collect data to properly investigate such incidents. The student will also learn how to properly execute the procedures within a CSIRP, and see how the plan will dictate information flow to the critical parties within the organization. Lastly, the program will connect Incident Response Management to an Information Security Management System.