(SCTP Module) Fundamentals of Security Incident Response
About This Course
This course provides participants with the essential skills to navigate the critical fields of security monitoring and incident response. In today's complex threat landscape, the ability to collect, analyze, and act upon security events is paramount. This course delves into the fundamental concepts of log and event correlation, teaching participants how to identify meaningful security incidents from a sea of data.
Participants will gain hands-on experience with Security Information and Event Management (SIEM) systems, understanding their architecture, function, and role as the central nervous system of a Security Operations Center (SOC). The curriculum covers both the theoretical and practical aspects of a structured incident response lifecycle, from initial detection and triage to escalation, containment, eradication, and post-incident recovery.
What You'll Learn
- Describe factors that affect the handling of security incidents in an organisation.
- Identify the technical, communication, and coordination steps involved in providing Cyber Security Incident Response Team (CSIRT) service.
- Analyse and assess the impact of computer security incidents.
- Perform network and host forensic investigation and correlation.
- Develop incident response strategies for various types of computer security incidents using the NIST Cybersecurity Framework.
Entry Requirements
O-level or NITEC with 2 years of working experience in Information and Communication Technology