As organizations continue to rely on expanding infrastructure in an increasingly hostile threat landscape, the escalation of incidents involving malicious actors poses critical risks to information systems and networks. The ability to identify threats, respond to incidents, restore systems, and enhance security postures is vital to the survival of the operation. The Incident Investigations and Response Manager certification course brings Incident Response core competencies to advanced levels by presenting students with 14 detailed chapters designed to align with a variety of training schedules.

Students will be provided with the knowledge and the practical skills needed to investigate and respond to network and system incidents. With a specific focus on the identification and remediation of incidents involving host and network devices, students will cover topics such as The Incident Response Life Cycle, Indicators of Compromise, Investigative Techniques, Threat Intelligence Collection, and Remediation Strategies. A minimum of 12 months of work experience or equivalent study in the Information Security field is suggested. Students should have knowledge of basic networking and TCP/IP protocols.

Students will be prepared for the threat hunting, target modeling, intelligence issue decomposition, and threat analysis concepts presented in the next course in the track.