CISM: Information Security Incident Management Part 1


Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description

Explore the fundamentals of security incident management, including methods for classifying incidents, roles, responsibilities, and training for incident response team members, and notification and escalation processes.



Expected Duration (hours)
1.0

Lesson Objectives

CISM: Information Security Incident Management Part 1

  • describe incident management concepts
  • define components of an incident response plan (IRP)
  • map the BCP and DRP to the IRP
  • specify methods for incident classification and categorization
  • definine incident containment methods
  • describe notification and escalation processes
  • define roles and responsibilities in security Incidents
  • know IRT training, tools and equipment
  • classify forensic requirements for handling evidence
  • describe security incident management
  • Course Number:
    it_spcesm_07_enus

    Expertise Level
    Intermediate