Systems Security Certified Practitioner: Incident Response and Recovery

Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number
Expertise Level

---

Overview/Description
Despite your best efforts, security incidents will happen, and it's important you know how to properly respond and recover to protect enterprise assets. This course covers incident handling best practices, including discovery, escalation, reporting, and response. It also details appropriate countermeasures and continuity practices in addition to an overview of forensic investigation best practices, including appropriate evidence handling and chain of custody activities. This course is one of a series in the Skillsoft learning path that covers the objectives for the (ISC)2 Systems Security Certified Practitioner Exam.

Target Audience
Individuals interested in the (ISC)2 Systems Security Certified Practitioner exam; security professionals interested in acquiring new skills and knowledge in security best practices

Prerequisites
None

Expected Duration (hours)
1.0

Lesson Objectives

Systems Security Certified Practitioner: Incident Response and Recovery

start the course

describe incident discovery activities

identify incident escalation activities

identify lessons learned activities

identify incident response best practices

identify best practices when implementing countermeasures

identify first responder best practices during forensic investigation activities

identify best practices for evidence handling during forensic investigation activities

describe characteristics and best practices of chain of custody during forensic investigation activities

identify best practices for preservation of scene during forensic investigation activities

describe characteristics and best practices for supporting emergency response plans and procedures

describe interim or alternate processing strategies as part of business continuity activities

identify best practices for restoration planning as part of business continuity activities

describe characteristics and best practices for implementing backup and redundancy options

describe characteristics and best practices for testing and drills for supporting emergency response plans and procedures

identify best practices for handling incidents, supporting forensic investigations, and supporting business continuity activities

Course Number:
sp_sscp_a05_it_enus

Expertise Level
Beginner