Incident Response Frameworks

kurs ist nicht verfügbar in Deutsch (Deutschland)

Wir übersetzen es in weitere Sprachen.

Incident Response Frameworks

Dozenten: Starweaver

Bei enthalten

Mehr erfahren

6 Module

Verschaffen Sie sich einen Einblick in ein Thema und lernen Sie die Grundlagen.

Stufe Mittel

Empfohlene Erfahrung

9 Stunden zu vervollständigen

Flexibler Zeitplan

In Ihrem eigenen Lerntempo lernen

6 Module

Verschaffen Sie sich einen Einblick in ein Thema und lernen Sie die Grundlagen.

Stufe Mittel

Empfohlene Erfahrung

9 Stunden zu vervollständigen

Flexibler Zeitplan

In Ihrem eigenen Lerntempo lernen

Was Sie lernen werden

Describe the fundamentals of a cybersecurity major incident response process.
Explain key industry frameworks (NIST and SANS).
Develop your own cybersecurity major incident response plan.
Test, measure, and improve your cybersecurity major incident management process.

Kompetenzen, die Sie erwerben

Kategorie: Communication Planning
Kategorie: Cyber Attacks
Kategorie: NIST 800-53
Kategorie: Incident Management
Kategorie: Computer Security Incident Management
Kategorie: Business Risk Management
Kategorie: Return On Investment
Kategorie: IT Management
Kategorie: IT Service Management
Kategorie: Cyber Security Strategy
Kategorie: Incident Response
Kategorie: Problem Management
Kategorie: Cybersecurity
Kategorie: Information Technology Infrastructure Library
Kategorie: Continuous Improvement Process
Kategorie: Cyber Threat Intelligence
Kategorie: Test Planning
Kategorie: Stakeholder Communications
Kategorie: Simulations

Wichtige Details

Zertifikat zur Vorlage

Zu Ihrem LinkedIn-Profil hinzufügen

Kürzlich aktualisiert!

Dezember 2025

Bewertungen

4 Zuweisungen¹

KI-bewertet siehe Haftungsausschluss

Unterrichtet in Englisch

Erfahren Sie, wie Mitarbeiter führender Unternehmen gefragte Kompetenzen erwerben.

Weitere Informationen zu Coursera für Unternehmen

Logos von Petrobras, TATA, Danone, Capgemini, P&G und L'Oreal

In diesem Kurs gibt es 6 Module

In today's digital battlefield, cyber incidents are not a matter of if, but when. Whether it's ransomware, phishing, or insider threats, the ability to respond swiftly and effectively can mean the difference between containment and catastrophe.

This course is designed to equip you with the tools, strategies, and confidence to implement and use industry best practice for cybersecurity incident response to create an incident response process that anyone can follow. We'll explore the most widely adopted industry frameworks (NIST and SANS) and learn how to apply them in real-world scenarios as well as integrate them into your existing IT Service Management solution. Through expert guidance and real-world examples, you'll gain a detailed understanding of how to build response plans, coordinate teams, and recovering from attacks. Whether you're an aspiring cybersecurity professional, an IT support manager, or a team member looking to sharpen your response skills, this course will prepare you to act decisively when it matters most. This course is designed for professionals who play a direct role in keeping IT systems secure and running smoothly. Cybersecurity engineers, Service Desk Analysts, Service Desk Managers, and IT Managers will benefit from the practical, structured approach to handling major incidents. Whether you’re already involved in incident response or looking to build stronger skills, the content is tailored to support real-world responsibilities. To fully engage with the material, you should have a basic understanding of IT Service Management and the four core ITIL pillars: Incident, Problem, Change, and Request. A general grasp of business IT operations, along with familiarity with common cybersecurity events, will help you connect the lessons to the scenarios you encounter in your own environment. By the end of the course, you’ll be able to explain the foundations of cybersecurity major incident response and compare the NIST and SANS frameworks with confidence. You’ll also learn how to build a complete incident response plan tailored to your organisation and understand how to test, evaluate, and continuously improve that plan so it remains effective over time.

In this course, you’ll learn how to respond confidently to major cybersecurity incidents using industry-standard frameworks like NIST and SANS. You’ll practice identifying incidents, coordinating response efforts, and building structured plans that integrate smoothly with IT Service Management workflows. Through clear examples and practical guidance, you’ll develop the skills to contain threats, recover systems, and improve your organisation’s readiness over time. By the end, you’ll be equipped to step into incident response roles and act decisively when a real attack hits.

Das ist alles enthalten

1 Video1 Lektüre

In this module we will look at defining the problem of what a major cybersecurity incident is and why it is important to our businesses to have a plan in place to manage these issues when they arise. We will cover key terminology that we will need for future sections, as well as what industry frameworks we will use to populate the requirements as we go. Finally, we will look at why having a major incident process in place before a cybersecurity incident is key to limiting damage, halting the attack, and recovering as quickly as possible.

Das ist alles enthalten

10 Videos1 Lektüre1 Aufgabe1 peer review1 Diskussionsthema

10 VideosInsgesamt 54 Minuten

Module Introduction 3 Minuten
Key Terminology and Acronyms 5 Minuten
IT Service Management 5 Minuten
Importance of an IT Service Management Solution5 Minuten
What Defines a Mature IT Service Management (ITSM) Solution5 Minuten
Importance of Preparation and Planning 5 Minuten
ITIL Incident, Major Incident, and Problem Management 5 Minuten
Cost Savings from Preventing Cyber Attacks 5 Minuten
Non-Monetary Impact on the Business5 Minuten
Understanding ROI for Cybersecurity Investments 5 Minuten

1 LektüreInsgesamt 5 Minuten

What Is IT Service Management and Its Importance5 Minuten

1 AufgabeInsgesamt 20 Minuten

Defining the Problem 20 Minuten

1 peer reviewInsgesamt 30 Minuten

Hands-On-Learning: Mapping Out an Incident Management Process 30 Minuten

1 DiskussionsthemaInsgesamt 10 Minuten

Importance of IT Service Management 10 Minuten

This module is designed to provide participants with a comprehensive understanding of key cybersecurity incident management frameworks, including NIST, and SANS. The module aims to equip learners with the knowledge and skills necessary to effectively manage and respond to cybersecurity incidents.

Das ist alles enthalten

13 Videos1 Lektüre1 Aufgabe1 peer review1 Diskussionsthema

13 VideosInsgesamt 70 Minuten

Module Introduction2 Minuten
SANS Institute's Incident Response (IR) Framework 4 Minuten
Preparation and Identification 5 Minuten
Containment and Eradication 4 Minuten
Recovery and Lessons Learned 7 Minuten
Third-Party/Supply Chain Incident Management 7 Minuten
What is NIST SP 800-616 Minuten
Preparation 6 Minuten
Incident Response 3 Minuten
Lessons Learned 6 Minuten
Document Management Standards. ISO 76865 5 Minuten
Creation, Storage, and Tracking of Document 5 Minuten
Monitoring and Maintenance Processes and Procedures 5 Minuten

1 LektüreInsgesamt 5 Minuten

Document Management: Minimum Requirements for the Storage of Documents5 Minuten

1 AufgabeInsgesamt 20 Minuten

Cybersecurity Incident Management Frameworks 20 Minuten

1 peer reviewInsgesamt 60 Minuten

Hands-On-Learning: Determine the Best Templates and Management Products to Use 60 Minuten

1 DiskussionsthemaInsgesamt 10 Minuten

Documentation Challenges 10 Minuten

A Cyber Incident Response Plan (CIRP) is a crucial document and associated process for IT and cybersecurity departments within a business. It provides a clearly defined process for handling any major cybersecurity event including, but not limited to, security breaches, data leaks, malware attacks, and other disruptions. In this module we will look at how to build out a CIRP specific to your business and how it can help minimize damage, reduce downtime, and protect an organization's reputation.

Das ist alles enthalten

10 Videos1 Lektüre1 Aufgabe1 peer review1 Diskussionsthema

10 VideosInsgesamt 41 Minuten

Module Introduction 2 Minuten
CIRP Templates 4 Minuten
Gathering the Right People for the Team 4 Minuten
Defining The Trigger for a Major Incident Process 4 Minuten
Planning for Identification Phase 4 Minuten
Planning for Response 4 Minuten
Planning for Lessons Learned 4 Minuten
Cost Savings from Preventing Cyber Attacks 3 Minuten
Non-Monetary Impact on the Business4 Minuten
Understanding ROI for Cybersecurity Investments 4 Minuten

1 LektüreInsgesamt 5 Minuten

Post Implementation Review (PIR) Guide 5 Minuten

1 AufgabeInsgesamt 20 Minuten

Developing a Cyber Incident Response Plan (CIRP) 20 Minuten

1 peer reviewInsgesamt 60 Minuten

Hands-On-Learning: Mapping Out an Incident Management Process 60 Minuten

1 DiskussionsthemaInsgesamt 10 Minuten

Post Implementation Review Timing 10 Minuten

This module will guide you through the essential steps of implementing an effective cyber incident response plan. It aims to equip you with the knowledge and skills needed to swiftly and efficiently address major cybersecurity incidents. From making the plan available to practical hands-on training, and improving the plan over time, you'll learn how to deploy a successful CIRP, ensuring your organization can minimize damage and recover quickly from cyber threats.

Das ist alles enthalten

10 Videos1 Lektüre1 Aufgabe1 peer review1 Diskussionsthema

10 VideosInsgesamt 43 Minuten

Module Introduction 1 Minute
Making the Process Available 4 Minuten
Communicating the Process 3 Minuten
Training Staff 4 Minuten
Simulating an Incident 4 Minuten
Advanced Simulations 3 Minuten
Measuring Simulation Success 5 Minuten
Continuous Process Improvement 4 Minuten
Creating a Review Schedule 4 Minuten
System Architecture Involvement 5 Minuten

1 LektüreInsgesamt 5 Minuten

Learn About Quality 5 Minuten

1 AufgabeInsgesamt 20 Minuten

Implementing a Cyber Incident Response Plan 20 Minuten

1 peer reviewInsgesamt 30 Minuten

Hands-On-Learning: Build Out First Draft of a Cyber Incident Response Plan 30 Minuten

1 DiskussionsthemaInsgesamt 10 Minuten

Document Review Schedule 10 Minuten

In this wrap-up module, you’ll apply everything you’ve learned by creating a practical implementation plan for a full cybersecurity incident response process. This final project brings the core concepts together and shows your ability to design, document, and prepare an organisation for effective incident response.

Das ist alles enthalten

1 Video1 peer review

Dozenten

Starweaver

458 Kurse894.013 Lernende

Brett Moffett

Starweaver

1 Kurs2 Lernende

von

Starweaver

Warum entscheiden sich Menschen für Coursera für ihre Karriere?

Felipe M.

Lernender seit 2018

„Es ist eine großartige Erfahrung, in meinem eigenen Tempo zu lernen. Ich kann lernen, wenn ich Zeit und Nerven dazu habe.“

Jennifer J.

Lernender seit 2020

„Bei einem spannenden neuen Projekt konnte ich die neuen Kenntnisse und Kompetenzen aus den Kursen direkt bei der Arbeit anwenden.“

Larry W.

Lernender seit 2021

„Wenn mir Kurse zu Themen fehlen, die meine Universität nicht anbietet, ist Coursera mit die beste Alternative.“

Chaitanya A.

„Man lernt nicht nur, um bei der Arbeit besser zu werden. Es geht noch um viel mehr. Bei Coursera kann ich ohne Grenzen lernen.“

Neue Karrieremöglichkeiten mit Coursera Plus

Unbegrenzter Zugang zu 10,000+ Weltklasse-Kursen, praktischen Projekten und berufsqualifizierenden Zertifikatsprogrammen - alles in Ihrem Abonnement enthalten

Mehr erfahren

Bringen Sie Ihre Karriere mit einem Online-Abschluss voran.

Erwerben Sie einen Abschluss von erstklassigen Universitäten – 100 % online

Erkunden Sie die Abschlüsse

Schließen Sie sich mehr als 3.400 Unternehmen in aller Welt an, die sich für Coursera for Business entschieden haben.

Schulen Sie Ihre Mitarbeiter*innen, um sich in der digitalen Wirtschaft zu behaupten.

Mehr erfahren

Häufig gestellte Fragen

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

When you purchase a Certificate you get access to all course materials, including graded assignments. Upon completing the course, your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Weitere Fragen

Besuchen Sie die das Hilfe-Center für Kursteilnehmer.

Finanzielle Unterstützung verfügbar,

¹ Einige Aufgaben in diesem Kurs werden mit AI bewertet. Für diese Aufgaben werden Ihre Daten in Übereinstimmung mit Datenschutzhinweis von Courseraverwendet.