Cybersecurity · Beginner level

Beginner level · Module 5 of 5 · 10 guided hours

Incident Response Basics

Respond correctly when an account or device is compromised, and recover safely.

Learning objectives

  • Recognise signs that an account or device is compromised
  • Take immediate containment steps
  • Report, recover and learn from incidents, and complete the level project

Topics

  • signs of compromise
  • first steps
  • account recovery
  • ransomware basics
  • reporting
  • lessons learned

Lessons

  1. Lesson 1 Signs of Compromise and First Steps

    Recognise when something is wrong and act quickly to limit damage.

    signs of compromisecontainmenttrusted devicesessions

  2. Lesson 2 Ransomware, Extortion and Reporting

    Respond to ransomware and threats without making things worse.

    ransomwareextortionisolationreporting channels

  3. Lesson 3 Recovery, Lessons Learned and Project Completion

    Recover safely, improve defences and complete the level project.

    recoveryroot causeimprovementsincident plan

Practical activity

Work through two incident scenarios (a hacked email account and a ransomware warning) and complete the Security Check-Up project.

Expected outcomes

  • Calm, correct first response
  • A usable incident plan

Assessment

Level project assessed against its criteria.

Free taster lesson Intro to Incident Response: What to Do When Hacked Read a free self-study lesson on this topic in the Free Course Library.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.