Incident Response Frameworks

Ce cours n'est pas disponible en Français (France)

Nous sommes actuellement en train de le traduire dans plus de langues.

Incident Response Frameworks

Instructeurs : Starweaver

Inclus avec

6 modules

Obtenez un aperçu d'un sujet et apprenez les principes fondamentaux.

niveau Intermédiaire

Expérience recommandée

9 heures à compléter

Planning flexible

Apprenez à votre propre rythme

6 modules

Obtenez un aperçu d'un sujet et apprenez les principes fondamentaux.

niveau Intermédiaire

Expérience recommandée

9 heures à compléter

Planning flexible

Apprenez à votre propre rythme

Ce que vous apprendrez

Describe the fundamentals of a cybersecurity major incident response process.
Explain key industry frameworks (NIST and SANS).
Develop your own cybersecurity major incident response plan.
Test, measure, and improve your cybersecurity major incident management process.

Compétences que vous acquerrez

Catégorie : Problem Management
Catégorie : Test Planning
Catégorie : Computer Security Incident Management
Catégorie : Communication Planning
Catégorie : Return On Investment
Catégorie : Cyber Threat Intelligence
Catégorie : Incident Response
Catégorie : Incident Management
Catégorie : Cybersecurity
Catégorie : Cyber Security Strategy
Catégorie : Simulations
Catégorie : Cyber Attacks
Catégorie : IT Service Management
Catégorie : IT Management
Catégorie : Information Technology Infrastructure Library
Catégorie : Continuous Improvement Process
Catégorie : NIST 800-53
Catégorie : Stakeholder Communications
Catégorie : Business Risk Management

Détails à connaître

Certificat partageable

Ajouter à votre profil LinkedIn

Récemment mis à jour !

décembre 2025

Évaluations

4 affectations¹

Noté par l'IA voir l'avis de non-responsabilité

Enseigné en Anglais

Découvrez comment les employés des entreprises prestigieuses maîtrisent des compétences recherchées

En savoir plus sur Coursera pour les affaires

logos de Petrobras, TATA, Danone, Capgemini, P&G et L'Oreal

Il y a 6 modules dans ce cours

In today's digital battlefield, cyber incidents are not a matter of if, but when. Whether it's ransomware, phishing, or insider threats, the ability to respond swiftly and effectively can mean the difference between containment and catastrophe.

This course is designed to equip you with the tools, strategies, and confidence to implement and use industry best practice for cybersecurity incident response to create an incident response process that anyone can follow. We'll explore the most widely adopted industry frameworks (NIST and SANS) and learn how to apply them in real-world scenarios as well as integrate them into your existing IT Service Management solution. Through expert guidance and real-world examples, you'll gain a detailed understanding of how to build response plans, coordinate teams, and recovering from attacks. Whether you're an aspiring cybersecurity professional, an IT support manager, or a team member looking to sharpen your response skills, this course will prepare you to act decisively when it matters most. This course is designed for professionals who play a direct role in keeping IT systems secure and running smoothly. Cybersecurity engineers, Service Desk Analysts, Service Desk Managers, and IT Managers will benefit from the practical, structured approach to handling major incidents. Whether you’re already involved in incident response or looking to build stronger skills, the content is tailored to support real-world responsibilities. To fully engage with the material, you should have a basic understanding of IT Service Management and the four core ITIL pillars: Incident, Problem, Change, and Request. A general grasp of business IT operations, along with familiarity with common cybersecurity events, will help you connect the lessons to the scenarios you encounter in your own environment. By the end of the course, you’ll be able to explain the foundations of cybersecurity major incident response and compare the NIST and SANS frameworks with confidence. You’ll also learn how to build a complete incident response plan tailored to your organisation and understand how to test, evaluate, and continuously improve that plan so it remains effective over time.

In this course, you’ll learn how to respond confidently to major cybersecurity incidents using industry-standard frameworks like NIST and SANS. You’ll practice identifying incidents, coordinating response efforts, and building structured plans that integrate smoothly with IT Service Management workflows. Through clear examples and practical guidance, you’ll develop the skills to contain threats, recover systems, and improve your organisation’s readiness over time. By the end, you’ll be equipped to step into incident response roles and act decisively when a real attack hits.

Inclus

1 vidéo1 lecture

In this module we will look at defining the problem of what a major cybersecurity incident is and why it is important to our businesses to have a plan in place to manage these issues when they arise. We will cover key terminology that we will need for future sections, as well as what industry frameworks we will use to populate the requirements as we go. Finally, we will look at why having a major incident process in place before a cybersecurity incident is key to limiting damage, halting the attack, and recovering as quickly as possible.

Inclus

10 vidéos1 lecture1 devoir1 évaluation par les pairs1 sujet de discussion

10 vidéosTotal 54 minutes

Module Introduction 3 minutes
Key Terminology and Acronyms 5 minutes
IT Service Management 5 minutes
Importance of an IT Service Management Solution5 minutes
What Defines a Mature IT Service Management (ITSM) Solution5 minutes
Importance of Preparation and Planning 5 minutes
ITIL Incident, Major Incident, and Problem Management 5 minutes
Cost Savings from Preventing Cyber Attacks 5 minutes
Non-Monetary Impact on the Business5 minutes
Understanding ROI for Cybersecurity Investments 5 minutes

1 lectureTotal 5 minutes

What Is IT Service Management and Its Importance5 minutes

1 devoirTotal 20 minutes

Defining the Problem 20 minutes

1 évaluation par les pairsTotal 30 minutes

Hands-On-Learning: Mapping Out an Incident Management Process 30 minutes

1 sujet de discussionTotal 10 minutes

Importance of IT Service Management 10 minutes

This module is designed to provide participants with a comprehensive understanding of key cybersecurity incident management frameworks, including NIST, and SANS. The module aims to equip learners with the knowledge and skills necessary to effectively manage and respond to cybersecurity incidents.

Inclus

13 vidéos1 lecture1 devoir1 évaluation par les pairs1 sujet de discussion

13 vidéosTotal 70 minutes

Module Introduction2 minutes
SANS Institute's Incident Response (IR) Framework 4 minutes
Preparation and Identification 5 minutes
Containment and Eradication 4 minutes
Recovery and Lessons Learned 7 minutes
Third-Party/Supply Chain Incident Management 7 minutes
What is NIST SP 800-616 minutes
Preparation 6 minutes
Incident Response 3 minutes
Lessons Learned 6 minutes
Document Management Standards. ISO 76865 5 minutes
Creation, Storage, and Tracking of Document 5 minutes
Monitoring and Maintenance Processes and Procedures 5 minutes

1 lectureTotal 5 minutes

Document Management: Minimum Requirements for the Storage of Documents5 minutes

1 devoirTotal 20 minutes

Cybersecurity Incident Management Frameworks 20 minutes

1 évaluation par les pairsTotal 60 minutes

Hands-On-Learning: Determine the Best Templates and Management Products to Use 60 minutes

1 sujet de discussionTotal 10 minutes

Documentation Challenges 10 minutes

A Cyber Incident Response Plan (CIRP) is a crucial document and associated process for IT and cybersecurity departments within a business. It provides a clearly defined process for handling any major cybersecurity event including, but not limited to, security breaches, data leaks, malware attacks, and other disruptions. In this module we will look at how to build out a CIRP specific to your business and how it can help minimize damage, reduce downtime, and protect an organization's reputation.

Inclus

10 vidéos1 lecture1 devoir1 évaluation par les pairs1 sujet de discussion

10 vidéosTotal 41 minutes

Module Introduction 2 minutes
CIRP Templates 4 minutes
Gathering the Right People for the Team 4 minutes
Defining The Trigger for a Major Incident Process 4 minutes
Planning for Identification Phase 4 minutes
Planning for Response 4 minutes
Planning for Lessons Learned 4 minutes
Cost Savings from Preventing Cyber Attacks 3 minutes
Non-Monetary Impact on the Business4 minutes
Understanding ROI for Cybersecurity Investments 4 minutes

1 lectureTotal 5 minutes

Post Implementation Review (PIR) Guide 5 minutes

1 devoirTotal 20 minutes

Developing a Cyber Incident Response Plan (CIRP) 20 minutes

1 évaluation par les pairsTotal 60 minutes

Hands-On-Learning: Mapping Out an Incident Management Process 60 minutes

1 sujet de discussionTotal 10 minutes

Post Implementation Review Timing 10 minutes

This module will guide you through the essential steps of implementing an effective cyber incident response plan. It aims to equip you with the knowledge and skills needed to swiftly and efficiently address major cybersecurity incidents. From making the plan available to practical hands-on training, and improving the plan over time, you'll learn how to deploy a successful CIRP, ensuring your organization can minimize damage and recover quickly from cyber threats.

Inclus

10 vidéos1 lecture1 devoir1 évaluation par les pairs1 sujet de discussion

10 vidéosTotal 43 minutes

Module Introduction 1 minute
Making the Process Available 4 minutes
Communicating the Process 3 minutes
Training Staff 4 minutes
Simulating an Incident 4 minutes
Advanced Simulations 3 minutes
Measuring Simulation Success 5 minutes
Continuous Process Improvement 4 minutes
Creating a Review Schedule 4 minutes
System Architecture Involvement 5 minutes

1 lectureTotal 5 minutes

Learn About Quality 5 minutes

1 devoirTotal 20 minutes

Implementing a Cyber Incident Response Plan 20 minutes

1 évaluation par les pairsTotal 30 minutes

Hands-On-Learning: Build Out First Draft of a Cyber Incident Response Plan 30 minutes

1 sujet de discussionTotal 10 minutes

Document Review Schedule 10 minutes

In this wrap-up module, you’ll apply everything you’ve learned by creating a practical implementation plan for a full cybersecurity incident response process. This final project brings the core concepts together and shows your ability to design, document, and prepare an organisation for effective incident response.

Inclus

1 vidéo1 évaluation par les pairs

Instructeurs

Starweaver

456 Cours892 726 apprenants

Brett Moffett

Starweaver

0 Cours0 apprenants

Offert par

Starweaver

Pour quelles raisons les étudiants sur Coursera nous choisissent-ils pour leur carrière ?

Felipe M.

Étudiant(e) depuis 2018

’Pouvoir suivre des cours à mon rythme à été une expérience extraordinaire. Je peux apprendre chaque fois que mon emploi du temps me le permet et en fonction de mon humeur.’

Jennifer J.

Étudiant(e) depuis 2020

’J'ai directement appliqué les concepts et les compétences que j'ai appris de mes cours à un nouveau projet passionnant au travail.’

Larry W.

Étudiant(e) depuis 2021

’Lorsque j'ai besoin de cours sur des sujets que mon université ne propose pas, Coursera est l'un des meilleurs endroits où se rendre.’

Chaitanya A.

’Apprendre, ce n'est pas seulement s'améliorer dans son travail : c'est bien plus que cela. Coursera me permet d'apprendre sans limites.’

Ouvrez de nouvelles portes avec Coursera Plus

Accès illimité à 10,000+ cours de niveau international, projets pratiques et programmes de certification prêts à l'emploi - tous inclus dans votre abonnement.

Faites progresser votre carrière avec un diplôme en ligne

Obtenez un diplôme auprès d’universités de renommée mondiale - 100 % en ligne

Découvrir les diplômes

Rejoignez plus de 3 400 entreprises mondiales qui ont choisi Coursera pour les affaires

Améliorez les compétences de vos employés pour exceller dans l’économie numérique

Foire Aux Questions

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

When you purchase a Certificate you get access to all course materials, including graded assignments. Upon completing the course, your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Plus de questions

Visitez le Centre d'Aide pour les Étudiants

Aide financière disponible,

¹ Certains travaux de ce cours sont notés par l'IA. Pour ces travaux, vos Données internes seront utilisées conformément à Notification de confidentialité de Coursera.