SECOPS: Handling Incident Events and Evidence

Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level

---

Overview/Description

Explore how NIST SP800-61 r2 is used to process an incident event and the recommended incident handling process. Examine evidence handling, as documented in NIST SP800-86 and how to apply VERIS schema categories to incident handling events.

Expected Duration (hours)
1.3

Lesson Objectives

SECOPS: Handling Incident Events and Evidence

use NIST SP800-61 r2 incident handling to process an incident event and describe the recommended incident handling process

describe evidence handling as documented in NIST SP800-86 and its importance in forensics

describe how to apply VERIS schema categories to incident handling events

Course Number:
it_secopstv_21_enus

Expertise Level
Intermediate