• Online, Self-Paced
Course Description

The use of risk management and control frameworks should help an organization to avoid and reduce the impact of incidents, but despite all of that, the information security professional must be ready when something goes wrong. In this course, Investigations and Incident Management, you will learn how to handle an incident with expertise and skill. First, you will touch on how to prepare for incident management. Then you will see how to detect, correct, and recover from incidents. Finally, you will discover how to conduct and learn from investigations, so that the incident management process can be better prepared for future adverse events. When you're finished with this course, you will have the skills and knowledge needed to handle incidents in a professional and competent manner.

Learning Objectives

  • Fundamentals of Investigations
  • Introduction to Incident Management
  • Incident Management Process

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.