--- title: "Cyber Incident Response & Recovery « National Cybersecurity Preparedness Consortium" language: "en-US" canonical_url: "https://oau235rmnx6qvzi.onstatic.studio/category/incident-response-recovery/" source_url: "https://oau235rmnx6qvzi.onstatic.studio/category/incident-response-recovery/" content_type: "text/markdown" --- [Skip to content](#content) # Cyber Incident Response & Recovery [ # Cybersecurity Incident Response and Management This course is designed to address the gap in specific technical skills needed for an effective cyber response. It will also help improve the limited availability of targeted hands-on IT and security training focused on cyber-attacks. This training focuses on government and private sector technical personnel who have intermediate and advanced knowledge of network operations and/or the responsibility for network security. ](https://oau235rmnx6qvzi.onstatic.studio/course/per-371/) [ ** ** ** ## PER-371 ](https://oau235rmnx6qvzi.onstatic.studio/course/per-371/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/per-371/)[TEEX NERRTC (Texas A&M)](https://oau235rmnx6qvzi.onstatic.studio/developer/teex-nerrtc/) ** ## [24 hours](https://oau235rmnx6qvzi.onstatic.studio/course/per-371/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/per-371/) [ Register ](https://teex.org/class/per371/) [ # Developing a Cybersecurity Annex for Incident Response Cyber-attacks occur more frequently and have become increasingly sophisticated. Cybersecurity events now have the potential to significantly disrupt the business operations of government and critical infrastructure services. Public and private sectors, in the United States, are at increasing and continual risk of surprise attacks from nation-state and non-state actors. (Burgess, 2018) The National Response Framework describes how preparedness can be achieved by developing an incident annex for each hazard. Incident annexes describe coordinating structures used to deliver core capabilities and support response missions unique to a specific type of incident. ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-367-w/) [ ** ** ** ## MGT-367-W ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-367-w/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-367-w/)[CIAS (UTSA)](https://oau235rmnx6qvzi.onstatic.studio/developer/utsa-cias/) ## [6 hours](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-367-w/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-367-w/) [ Register ](https://teex.org/class/AWR366/) [ # Disaster Recovery for Information Systems Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization’s access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization. ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-176-w/) [ ** ** ** ## AWR-176-W ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-176-w/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/awr-176-w/)[TEEX NERRTC (Texas A&M)](https://oau235rmnx6qvzi.onstatic.studio/developer/teex-nerrtc/) ## [1 hours](https://oau235rmnx6qvzi.onstatic.studio/course/awr-176-w/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-176-w/) [ Register ](https://teex.org/class/AWR176/) [ # Incident Response for Municipal, Police, Fire and EMS Information Technology Personnel This course is the second training in a two-part course. It is intended to introduce the basics of the incident response process to the Information Technology personnel in Police, Fire or EMS departments. This web-based course focuses on the steps involved in being aware of common cyber incidents, as well as steps in developing an incident response plan. The participants will apply this knowledge by developing a response plan specific to their jurisdiction. The content of the course includes: common cyber incidents occurring in Police, Fire and EMS IT departments, developing a response plan for common cyber incidents, distinguishing tasks for police, fire and EMS IT departments, and processes for future improvements to response plans. ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-389-w/) [ ** ** ** ## AWR-389-W ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-389-w/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/awr-389-w/)[NUARI (Norwich)](https://oau235rmnx6qvzi.onstatic.studio/developer/nuari/) ## [2 hours](https://oau235rmnx6qvzi.onstatic.studio/course/awr-389-w/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-389-w/) [ Register ](https://teex.org/class/AWR389/) [ # Integration of Cybersecurity Personnel into the Emergency Operations Center for Cyber Incidents Traditionally, cybersecurity is the responsibility of each organization individually using their own information security and technology personnel to manage threats. However, the physical consequences of a cyber incident are a shared responsibility that involves all levels of government, law enforcement, the private sector and other “stakeholders”. With this shared responsibility, there is a clear need to bring IT professionals and traditional emergency management personnel together to prepare for, respond to, and recover from the impacts of a cyber incident. ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-456/) [ ** ** ** ## MGT-456 ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-456/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-456/)[TEEX NERRTC (Texas A&M)](https://oau235rmnx6qvzi.onstatic.studio/developer/teex-nerrtc/) ** ## [24 hours](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-456/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-456/) [ Register ](https://teex.org/class/mgt456/) [ # Introduction to Cyber Incident Management This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response. This advanced level course is designed to teach students the fundamental of cyber incident analysis and responses. ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-169-w/) [ ** ** ** ## AWR-169-W ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-169-w/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/awr-169-w/)[TEEX NERRTC (Texas A&M)](https://oau235rmnx6qvzi.onstatic.studio/developer/teex-nerrtc/) ## [10 hours](https://oau235rmnx6qvzi.onstatic.studio/course/awr-169-w/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/awr-169-w/) [ Register ](https://teex.org/class/AWR169/) [ # Recovering from Cybersecurity Incidents The Recovering from Cybersecurity Incidents course is designed to provide guidance to a jurisdiction on the actions necessary to effectively recover from a cybersecurity attack. It discusses the pre- and post-incident programmatic activities needed for short-term and long-term recovery. The course bridges the different worlds of information technology and emergency management. This training is particularly pertinent to IT management, emergency management personnel, as well as any other government, critical infrastructure, or private sector personnel who has the responsibility for recovering after a cyber incident. ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-465/) [ ** ** ** ## MGT-465 ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-465/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-465/)[TEEX NERRTC (Texas A&M)](https://oau235rmnx6qvzi.onstatic.studio/developer/teex-nerrtc/) ** ## [16 hours](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-465/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-465/) [ Register ](https://teex.org/class/mgt465/) [COMING SOON](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/) [ # Cyber Threat Hunting Computers and servers in the United States are the most aggressively targeted systems in the world, commonly threatened by terrorists, nation states or terrorist sympathizers. Despite this growing threat level, training to counter these attacks has failed to increase in response, leaving critical information technology infrastructure exposed and vulnerable to attack. This Cyber Threat Hunting (CTH) course utilizes a blended learning approach that balances classroom lecture, hands-on laboratory exercises and supplemental material to provide technical personnel with a strategy to proactively recognize and mitigate adversarial cyber events before they cause harm, unlike incident management, which is reactive. ](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/) [ ** ** ** ## PER-366 ](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/)[CJI (Arkansas)](https://oau235rmnx6qvzi.onstatic.studio/developer/arkansas-cji/) ** ## [32 hours](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/per-366/) [COMING SOON](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/) [ # Security in Operational Technology and Distributed Energy Resources: Tools and Applications This course is designed to provide hands-on content/labs. The hands-on activities will cover some topics from the security in operational technology (OT) course and some topics from cybersecurity in distributed energy resource (DER) course. This is important for state and local professionals and employees in specific sectors to transition theory to practice to more effectively deal with cybersecurity challenges. ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/) [ ** ** ** ## MGT-363 ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/) ## [](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/)[CfIA (Memphis)](https://oau235rmnx6qvzi.onstatic.studio/developer/memphis-cfia/) ** ## [8 hours](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/) [ Learn More ](https://oau235rmnx6qvzi.onstatic.studio/course/mgt-363/) ## Share the Printed Course Catalog The NCPC catalog is available as a brochure in PDF form. Get the latest edition here: [ Download PDF ](https://dub.sh/ncpc-courses-brochure-latest) 590 [ ](#elementor-action%3Aaction%3Dpopup%3Aclose%26settings%3DeyJkb19ub3Rfc2hvd19hZ2FpbiI6IiJ9) ## Join the NCPC mailing list [ Open Signup Page ](https://lp.constantcontactpages.com/sl/qSFiSMh/ncpc)