Incident response: Containment, eradication and recovery

This training provides participants with the skills needed to effectively manage cybersecurity incidents through containment, eradication and recovery strategies. These three phases are critical for minimising damage, eliminating threats and restoring normal operations.

The course is part of the Cyrus project funded under the DIGITAL Europe Programme of the European Union which aims to propose a novel training programme to develop a cybersecurity innovation DNA and support companies in transport and manufacturing to respond to and mitigate cyber threats and attack.

About this course

Participants will learn:

• Containment techniques to prevent incidents from spreading, such as isolating compromised systems
• Eradication methods to completely remove threats from affected networks and devices
• Recovery strategies to restore operations securely while preventing future incidents
• Best practices for evidence handling and vulnerability mitigation to strengthen long-term security