Certnexus - Incident Response for Business Professionals

In this course, you will understand, assess and respond to security threats and operate a system and network security analysis platform. You will:

• Explain the importance of best practices in preparation for incident response
• Given a scenario, execute incident response process
• Explain general mitigation methods and devices
• Assess and comply with current incident response requirements.

General understanding of cybersecurity concepts

Official guide book for this course

Lesson 1: Assessment of Information Security Risks

• The Importance of Risk Management
• Integrating Documentation into Risk Management

Lesson 2: Response to Cybersecurity Incidents

• Deployment of Incident Handling and Response Architecture
• Containment and Mitigation of Incidents
• Preparation for Forensic Investigation as a CSIRT

Lesson 3: Investigating Cybersecurity Incidents

• Use a Forensic Investigation Plan
• Securely Collect and Analyze Electronic Evidence Topic C: Follow Up on the Results of an Investigation

Lesson 4: Complying with Legislation

• Examples of Legislation (if this is covered in above topics, no need to include here) GDPR, HIPPA, Elections
• Case study: Incident Response and GDPR (using GDPR legislation, create a response that is compliant with it – this could be discussion-based activity as well)
• State Legislation Resources and Example – search terms to find state legislation
• Using NYS as example use the NYS Privacy Response act or other legislation to create a similar case study as previous
• Provide answers on when to use federal versus state and do you have to follow both?