Principles of Incident Response Training
Principles of Incident Response Training ⫘
Service Overview ⫘
The Secureworks Principles of Incident Response (IR) Training is for teaching information technology and first-level security staff about the essential components of incident response (IR). While this staff may not be dedicated for IR tasks, they may find themselves involved in the initial moments of an incident or leveraged as ancillary support when containing or remediating an incident. Because of this, it is important to equip this staff with incident response training to assist the greater incident response team.
While staff of all skill levels are welcome to attend, roles finding the most value from this training include Help Desk staff, information technology staff, and first-level security staff. Strategic cross-functional components of the organization (e.g., Human Resources, Audit) may also find value in understanding incident response concepts.
Service Methodology ⫘
Secureworks will deliver this training to improve your organization's IR capabilities. Specific topics that will be discussed include the following:
- Preparation and Planning
- Detection and Reporting
- Triage and Analysis
- Containment
- Remediation and Restoration
- Post-Incident Activities
Additionally, Secureworks will facilitate a question and answer session at the conclusion of the training.
The standard course accommodates up to 12 participants; however, arrangements can be made for additional participants. The course may be delivered remotely through teleconference (e.g., Zoom, Teams) or on-site.
Training is valid for up to four continuing professional education (CPE) credits. Upon request, Secureworks can provide an email statement of completion to fulfill certification audit requirements.
Excluded from training: The training is designed to convey generic IR methodologies and the content will not be tailored to specific environments; however, the question and answer session may be used to address questions specific to your organization.
Outcome ⫘
Participants will receive a certificate of completion stating eight hours of continuing education was completed and may be leveraged for certification renewal requirements. Participants are expected to have an improved set of technical skills for responding during the initial moments of an incident.
Scope and Service Units ⫘
Delivered on-site or remotely through teleconference; up to four hours of training; up to 12 participants; eight Service Units
Limitations ⫘
On-site courses may be limited due to cross-border restrictions.