Incident Response Leadership for Cybersecurity Managers: From Incident Planning to Business Continuity
59mBeginner2025-09-25
Authors
Karla Reffold
Course details
This course equips you with in-demand skills to create an effective incident response plan—from engaging communications to maintaining business continuity. While preventing an incident often takes priority, knowing how to guide your business through an incident to recovery can make a significant difference in the impact that an incident can have. Instructor Karla Reffold offers insights on how to get business buy-in for incident preparation and how to ensure your business is fully prepared for possible incidents.
Learning objectives
Analyze key stakeholders and business-critical systems to develop a comprehensive incident response plan that incorporates appropriate communication protocols and third-party provider engagement.
Apply threat intelligence methodologies to enhance incident response planning by identifying potential adversaries, understanding their tactics, and creating scenario-based preparation strategies.
Design effective tabletop exercises to test your incident response plan, engage stakeholders, and systematically identify areas for improvement through structured post-exercise analysis.
Evaluate crisis communication approaches to integrate with incident response efforts, focusing on customer-centric messaging, stakeholder management, and maintaining composure during high-pressure situations.
Synthesize business continuity principles with incident response planning by implementing business impact analysis, defining recovery objectives, and establishing processes for system restoration and financial impact tracking.
Learning objectives
Analyze key stakeholders and business-critical systems to develop a comprehensive incident response plan that incorporates appropriate communication protocols and third-party provider engagement.
Apply threat intelligence methodologies to enhance incident response planning by identifying potential adversaries, understanding their tactics, and creating scenario-based preparation strategies.
Design effective tabletop exercises to test your incident response plan, engage stakeholders, and systematically identify areas for improvement through structured post-exercise analysis.
Evaluate crisis communication approaches to integrate with incident response efforts, focusing on customer-centric messaging, stakeholder management, and maintaining composure during high-pressure situations.
Synthesize business continuity principles with incident response planning by implementing business impact analysis, defining recovery objectives, and establishing processes for system restoration and financial impact tracking.
Concepts
Introduction
- Planning your incident response
Introduction to IR Planning
- Key components of an IR plan
- IR standards and frameworks
- Business case for planning
Incident Response Planning
- Identifying key stakeholders
- Identifying business critical systems
- Creating a plan plan templates
- Access to your plan
- Communicating your plan
- Communication protocols
- Engaging providers
Threat Intelligence for Incident Response
- Know your adversary
- Threat-based scenario planning
- Risk-based scenario planning
- Intelligence during an incident
Tabletop Exercises
- Planning a tabletop exercise
- Formats for tabletop exercises and types
- During a tabletop exercise
- Post-tabletop recap
Crisis Communications
- Crisis management vs. incident response
- Who needs to be involved
- Putting customer at the heart of communication
- How often and staying up to date with plan
- Staying calm under pressure
Business Continuity
- BCP and IR plan alignment
- Business impact analysis for IR
- Restore your systems
- Tracking lost revenue
Conclusion
- Next steps