Course Description
This course focuses on preparing for, reacting to and recovering from events that threaten the security of information and information resources, or that threaten to disrupt critical business functions. Students examine various levels of threats to an organization’s information assets and critical business functions, as well as develop policies, procedures and plans to address them. Technology specific to thwarting disruption and to supporting recovery is also covered.
Learning Objectives
- Students learn to explain the importance of information security and phases of risk management, detail the contingency planning process and contingency strategies for incident response, disaster recovery, and business continuity, prepare the Incident Response (IR) process and the computer security incident response team (CSIRT), recognize incident response strategies as well as technologies used to assist in the early detection of incidents, plan incident response strategies, incident recovery processes, and digital forensics investigations, outline key components of disaster recovery (DR) and business continuity (BC) planning, understand the development process and structure of the crisis management plan, and create a contingency plan with the IR, DR, and BC components.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):