Leadership - LDR553: Cyber Incident Mgmt

Lead cyber incident management when your organization needs it most. Master the skills to coordinate response teams, communicate with executives, manage attacker engagement, and drive recovery from major security incidents.

Incident Management sits above Incident Response, handling incidents too large for the SOC.

What you will learn:

Understanding and Scoping Incidents

• Apply standardized language and incident categorization
• Use the Cyber Incident Management Tool Kit and AIM-RADAR
• Define objectives and Commander's Intent
• Build effective IM teams with GenAI augmentation

Crisis Communications

• Brief executives using the Three Whats approach
• Manage communications with threat actors when necessary
• Develop public statements and control narratives
• Coordinate with legal, HR, and external partners

Remediation and Recovery

• Categorize network and data damage
• Prioritize and track remediation activities
• Conduct Root Cause Analysis using proven methods
• Plan incident closure and transition to BAU

Specialized Incident Types

• Handle Business Email Compromise investigations
• Manage cloud and management console compromises
• Respond to credential theft and supply chain incidents
• Lead ransomware response and recovery

Team Development

• Design and run cyber incident exercises
• Leverage Cyber Threat Intelligence effectively
• Build training programs based on organizational maturity
• Develop KPIs and metrics that drive improvement

Features continuous scenario throughout: manage a real-world style incident from start to finish.

30 CPE credits across 5 days. Prepares for GCIL certification.