Training in Imm­ediate Mea­sures

Prior to incident response and forensic investigation, an incident has to be detected, and it must be evaluated whether it is an IT security incident requiring external assistance. Consulting external specialists, more time passes before they can become active or be on site.

During this time, it makes sense to take initial measures with your own staff to secure evidence or prevent the incident from spreading further. Efficient analysis, handling and containment of an incident also requires many preparations on your part to ensure that the necessary information is available when required and that necessary interventions in the IT infrastructure can be made promptly. Successfully restoring IT systems after an incident also strongly depends on good preparations.

These topics are explained in this training through real-life examples, thus providing the basis for necessary improvements and preparatory measures. 

Basics of incident response and forensics for your employees:

• Correctly taking the first measures
• Assessing different situations; adequate response
• Help for self-help
• Exercises on the practical procedure

Participants will use laptops with various tools in this training course, so they can apply the acquired knowledge in hands-on exercises. The laptops are provided by cirosec for the time of the training.

The participants will receive comprehensive course material.

Target group:

internal incident response team and administrators involved in an incident

The training is held in German by an experienced trainer. The trainer from cirosec is working as a consultant and incident responder and can thus bring considerable and current practical experience to the training.

Duration: 1 day 

Dates:   
by arrangement