Course Details

This course is appropriate for a wide range of professionals but not limited to:

• Entry- to mid-level IT and security professionals
• SOC analysts, help desk staff, and network administrators
• Incident response team members and cybersecurity enthusiasts
• Risk, compliance, and IT governance professionals
• Anyone responsible for detecting or responding to cyber threats

• Expert-led sessions with dynamic visual aids
• Comprehensive course manual to support practical application and reinforcement
• Interactive discussions addressing participants’ real-world projects and challenges
• Insightful case studies and proven best practices to enhance learning

By the end of this course, participants will be able to:

• Understand core concepts in cybersecurity, threats, and risk
• Identify and analyze common types of cyber attacks
• Apply security best practices to protect systems and networks
• Follow a structured approach to incident detection and response
• Perform basic digital forensics and containment strategies
• Document and report incidents to support recovery and compliance

DAY 1

Introduction to Cybersecurity

• Welcome and introduction
• Pre-test
• Understanding cybersecurity: Goals and principles
• Overview of threat landscape (malware, phishing, ransomware, etc.)
• Vulnerabilities, exploits, and risks
• Security architecture: defense-in-depth
• Lab: Identifying threats in simulated environments

DAY 2

Network Security and System Hardening

• Network layers and security protocols
• Firewalls, IDS/IPS, and segmentation
• Operating system and endpoint security fundamentals
• Security baselines and patch management
• Lab: Analyzing suspicious traffic with Wireshark

DAY 3

Introduction to Incident Response

• The incident response lifecycle (NIST/ISO standards)
• Preparation and planning
• Detection and analysis of cyber incidents
• Indicators of compromise (IOCs) and threat intelligence
• Lab: Event log analysis and identifying an attack

DAY 4

Containment, Eradication, and Recovery

• Short-term and long-term containment strategies
• Root cause analysis and system cleanup
• Restoring operations and verifying system integrity
• Communication, reporting, and documentation
• Lab: Simulating and managing a ransomware attack

DAY 5

Forensics, Reporting, and Simulation Exercise

• Basics of digital forensics in incident response
• Evidence collection and chain of custody
• Post-incident reviews and reporting structure
• Hands-on scenario: Full-cycle incident response simulation
• Q&A, and knowledge check
• Post-test
• Certificate ceremony