Course Description

Cybersecurity: Incident Handling and Response

DHS Certified, course catalog #PER 253

The goal of "Cybersecurity: Incident Handling and Response" is to educate and train public safety professionals concerning proper actions and procedures for dealing with a critical incident involving network infrastructure and investigative procedures aimed specifically at technological issues. This will include information concerning:

  • Log collection and analysis
  • Computer and network forensics
  • IP tracing
  • Dealing with computer viruses and Trojans
  • Network security issues
  • Legal issues regarding technology

Delivery Method

The delivery method for this course will involve lecture, personal interaction between the instructor and students, as well as hands-on labs utilizing the thirty (30) workstations of the SENTINEL Mobile Lab and the SENTINEL Hardware Example Lab. Students will be provided all presentation materials, Cybersecurity: Incident Handling and Response for additional reading and information, a comprehensive bibliography describing additional resources on the subjects of network infrastructure and security, and the SENTINEL Lab Exercise Manual for use during class sessions and additional lab exercises that can be completed outside of class sessions.

Target Audience

The target audience for "Cybersecurity: Incident Handling and Response" are technical investigators and first responders. This track is designed for an individual that has a moderately high level of expertise in the fields of technology, network security, and computer forensics.

Prerequisites

The prerequisite for this course is an advanced knowledge base concerning computer and network concepts and functions as well as experience involving incident handling and computer forensics.

Evaluation Criteria

Program and student evaluation will be completed using two methods: 1) Pre and Post Assessment tool completion and 2) Student course evaluation form completion. The Pre and Post Assessment tool scores will be calculated to receive raw and percentage improvement scores for each participant. Student course evaluation forms will be modeled after the Department of Homeland Security, Office of Grants and Training, Course Evaluation/Action Steps form collecting demographic data as well as both quantitative and qualitative data.