Beginner · 1 day or two half-days
Introduction to information security
The basic course for beginners: why security concerns everyone and what each person can concretely do.
Training
Incident response basics
What happens in the first hours of a security incident – and who makes which decision.
In a real emergency it is not the best tool that decides the outcome, but a practised response. The course walks through an incident from detection to follow-up and ends with a tabletop exercise on a realistic scenario – including the uncomfortable questions that come up.
Request this courseAt a glance
- Level
- Advanced
- Duration
- 1 day including a tabletop exercise
- Audience
- IT teams, administrators, service desk, information security officers
- Format
- In-house – on site or remote
- Language
- German or English
Structure
This is how the course is built up. I agree the order and focus with you in advance, based on your audience and prior knowledge.
-
Fundamentals of the incident process
Event, alert, incident: classification and severity levels as well as roles and responsibilities.
-
From detection to containment
Triage of relevant events, containment and evidence preservation without destroying traces.
-
Communication & reporting duties
Escalation internally and towards management, NIS2 deadlines and Art. 33 GDPR.
-
Recovery & lessons learned
When a system can be trusted again and how lessons learned actually lead to change.
-
Tabletop exercise
A ransomware scenario played through as a team – including the uncomfortable questions that come up.
Course content
- Event, alert, incident: classification and severity levels
- Roles and responsibilities in the incident process
- Detection and triage: what is actually relevant?
- Containment and evidence preservation without destroying traces
- Communication and escalation – internally and towards management
- Reporting duties: NIS2 deadlines and Art. 33 GDPR
- Recovery and the question of when a system can be trusted again
- Lessons learned that actually lead to change
- Tabletop exercise: a ransomware scenario played through as a team
What you take away
- A practised process instead of frantic activity in the first hours
- Clarity about decision paths and reporting deadlines
- A documented list of gaps from the exercise as a starting point
More training courses
Advanced · 2 days
ISMS to ISO 27001 – implementation explained in practice
From the standard to a working management system: scope, risks, evidence, certification.
Advanced · 1 day
Cyber Resilience Act – implementation
For manufacturers of connected products: clarify applicability, understand obligations, meet deadlines.
Workshop · 1-day workshop
Creative awareness measures
A workshop for everyone responsible for awareness – and tired of mandatory e-learning.
Interested in “Incident response basics”?
Tell me briefly about group size, prior knowledge and your preferred date – I will come back with a proposal including effort.