This course covers incident response methods and procedures are taught in alignment with industry frameworks such as US-CERT’s NCISP (National Cyber Incident Response Plan), and Presidential Policy Directive (PPD) 41 on Cyber Incident Coordination Policy. It is ideal for candidates who have been tasked with managing compliance with state legislation and other regulatory requirements regarding incident response, and for executing standardized responses to such incidents. The course introduces procedures and resources to comply with legislative requirements regarding incident response. This course is designed to assist students in preparing for the CertNexus Incident Responder Credential (CIR-110). What you learn and practice in this course can be a significant part of your preparation.


* Actual course outline may vary depending on offering center. Contact your sales representative for more information.

Learning Objectives

In this course, you will understand, assess and respond to security threats and operate a system and network security analysis platform. You will:

Explain the importance of best practices in preparation for incident response
Given a scenario, execute incident response process
Explain general mitigation methods and devices
Assess and comply with current incident response requirements

  • Assessment of Information Security Risks

  • The Importance of Risk Management
    Integrating Documentation into Risk Management

  • Response to Cybersecurity Incidents

  • Deployment of Incident Handling and Response Architecture
    Containment and Mitigation of Incidents
    Preparation for Forensic Investigation as a CSIRT

  • Investigating Cybersecurity Incidents

  • Use a Forensic Investigation Plan
    Securely Collect and Analyze Electronic Evidence
    Follow Up on the Results of an Investigation

  • Complying with Legislation

  • Examples of Legislation (if this is covered in above topics, no need to include here) GDPR, HIPPA, Elections
    Case study- Incident Response and GDPR (Using GDPR legislation, create a response that is compliant with it - this could be discussion-based activity as well.)

  • State Legislation Resources and Example

  • Search terms to find state legislation
    Using NYS as example use the NYS Privacy Response act or other legislation to create a similar case study as previous.
    Provide answers on when to use federal versus state and do you have to follow both?


This course is designed primarily for IT leaders and company executives who are responsible for complying with incident response legislation. This course focuses on the knowledge, resources, and skills necessary to comply with incident response, and incident handling process requirements.




General understanding of cybersecurity concepts.


Length: 1.0 day (8 hours)


Not Your Location? Change

Course Schedule:

Schedule select
9:00 AM ET -
5:00 PM ET
Schedule select
9:00 AM ET -
5:00 PM ET