Cyber Incident Response & Digital Forensics Readiness

1. Lesson 1: Identify and document organisational incident response plan requirements
2. Lesson 2: Identify and document incident response team services according to organisational requirements
3. Lesson 3: Identify incident response plan structure according to organisational requirements
4. Lesson 4: Determine and document alignment of organisation’s existing incident response plan against identified requirements
5. Lesson 5: Submit documentation to required personnel, seek and respond to feedback
6. Lesson 6: Self-learning task

1. Lesson 7: Develop and document incident management policy according to task requirements
2. Lesson 8: Create incident response plans according to organisational requirements and security policies and procedures
3. Lesson 9: Develop incident handling and reporting procedures
4. Lesson 10: Create incident response exercises, red-teaming activities, staffing and training requirements
5. Lesson 11: Develop procedure for collecting and protecting forensic evidence during incident response procedures according to organisational requirements
6. Lesson 12: Establish and document incident the response plan
7. Lesson 13: Self-learning task

1. Lesson 14: Apply response actions to reported security incident according to incident response plan and task requirements
2. Lesson 15: Assist in collecting, processing and preserving evidence according to requirements
3. Lesson 16: Execute incident response plans, red-teaming activities and incident response exercises
4. Lesson 17: Document security incident response and actions according to task requirements
5. Lesson 18: Collect, analyse and report incident management measures according to task requirements
6. Lesson 19: Self-learning task

1. Lesson 20: Assess and document efficiency and effectiveness of incident response plans activities
2. Lesson 21: Examine and document effectiveness of red teaming and incident response tests, training and exercises
3. Lesson 22: Assess effectiveness of communication between incident response team and required internal and external organisations
4. Lesson 23: Determine and document response improvement activities
5. Lesson 24: Submit documentation to required personnel and obtain final task sign off
6. Lesson 25: Self-learning task

Yes. ICTSAS524 Develop, implement and evaluate an incident response plan is a current unit of competency in the ICT Information and Communications Technology, listed on training.gov.au, the National Register of vocational education and training in Australia.

4 chapters and 25 lessons, built around the unit's 4 official outcomes. It includes 24 videos and 129 knowledge-check questions.

Assessment tasks for this unit are listed under Assignments in the unit, with how to submit each one and what's still outstanding.

Go to dashboard opens this unit's own dashboard. Progress, activity and streaks there count this unit only.