COURSE 039 · Professional
Incident response and cyber resilience
Free cybersecurity education for anyone who wants to protect people and technology. Study published lessons, examples and exercises without creating an account.
Loading this course…
Published lessons in this course
Each link opens the complete lesson on its own permanent page. New manuscript edits appear there after publication.
EN · 10 daily lessons · 12 full chapters
Lesson 1: Day 1 — Model a service transaction before a security signalLesson 2: Day 2 — Test coverage by write route and by evidence layerLesson 3: Day 3 — Separate availability of a person from authority to decideLesson 4: Day 4 — Reason about clocks without inventing a deletion deadlineLesson 5: Day 5 — Hand over a readiness decision that another shift can falsifyLesson 6: Day 1 — Allocate a decision right, not just a job titleLesson 7: Day 2 — Bind approval to one versioned action envelopeLesson 8: Day 3 — Choose a proportionate control with a falsifierLesson 9: Day 4 — Treat ambiguous approval as an unanswered questionLesson 10: Day 5 — Hand over a time-bounded decision, not a success storyChapter 1: Chapter 1 — Incident lifecycle and organizational readinessChapter 2: Chapter 2 — Authority, scope and response rolesChapter 3: Chapter 3 — Alert intake and severity assessmentChapter 4: Chapter 4 — Evidence preservation and case recordsChapter 5: Chapter 5 — Investigation, hypotheses and timeline buildingChapter 6: Chapter 6 — Containment planning and approvalsChapter 7: Chapter 7 — Eradication and verificationChapter 8: Chapter 8 — Recovery, continuity and return to serviceChapter 9: Chapter 9 — Communications, privacy and legal coordinationChapter 10: Chapter 10 — Playbook engineering and quality reviewChapter 11: Chapter 11 — Supervised incident simulationChapter 12: Chapter 12 — Case portfolio and after-action review
COURSE 039
Incident response and cyber resilience
Loading the current book and lesson guide…
View worked answers
YOUR PROGRESS · OPTIONAL
Save this lesson
Reading is open without an account. Saving progress with optional sign-in will be added later.