IF25-40313
Cyber Incident Management and Response
Description
This course prepares students to explain the life cycle and procedures of cyber incident handling, carry out security monitoring to detect incidents, and apply digital forensics in incident response and recovery. Study materials: Security (SEC).
Topics
- Cyber incidents and the incident handling life cycle
- Incident response policies and procedures
- Security monitoring and incident detection
- Log and security event analysis
- Digital forensics
- Containment, recovery and incident reporting
- Post-incident review
Course Learning Outcomes (CLO)
Each course outcome derives from one programme outcome.
- CPMK-KSMI-02
Students are able to evaluate security by appropriately applying defence strategies to infrastructure and mobile devices.
CPLP02 - CPMK-KSMI-01
Students are able to design and implement modern computing architectures by making use of artificial intelligence, multimedia and data integrity
CPLP02
Supported PLOs
- CPLP02
- Design and evaluate modern computing system architectures that integrate artificial intelligence, multimedia and data integrity, and apply cyber defence strategies to infrastructure and mobile devices.

