Cybersecurity · Intermediate · 16 live learning hours

Certificate of completion

Learners who meet the course participation and practical assessment requirements receive a Solid Elf certificate of completion.

What you will learn

Map incident roles and escalation decisions
Build an evidence-aware response checklist
Design a recovery exercise and evaluate dependencies

Course outline

Week 1: Preparation, asset context and incident ownership
Week 2: Triage, timelines and evidence handling
Week 3: Containment decisions and communications
Week 4: Restoration dependencies and tabletop exercise

Practical project

An incident playbook, communication template and tabletop exercise report.

Before you start

Familiarity with IT operations, networks or information security.

Learning format

Fully online and live. 4 weeks · 8 sessions · 2 hours per session, twice each week. Cohort dates and the two weekly meeting days are agreed during enrolment. Allow an additional 1–2 hours of independent practice each week.

Exercises should use synthetic, de-identified or otherwise authorised material. Do not bring confidential client records or live credentials into a training session.

What the fee includes

Live tuition, guided exercises, reusable templates and feedback on your practical assignment. Software licences and internet access are not included. The published fee is per learner; any applicable tax and payment instructions are stated in writing before you pay. Certificate of completion is provided to learners who meet the course participation and assessment requirements.

Software and reference material

Explore official reference material ↗. Training is independently offered by Solid Elf; no software-vendor accreditation or certification is claimed unless explicitly stated.

Incident Response & Recovery Readiness