CIS 460 - Incident Response

5 Credits

Students use lab environments to explore Incident Response. The students will gather and use threat intel to identify indicators of compromise, and common tactics, techniques, and procedures. Students will explain and demonstrate their processes through reporting.

Pre-requisite(s) CIS 370 and CIS 320 with min. 2.0
Program Admission Required Yes Admitted Program BAS - CIS
FeesAcademic Technology Fee

Quarters Typically Offered
Spring Evening

Designed to Serve For students admitted to the BAS program in Cybersecurity and Digital Forensics.
Active Date 20250401T11:44:12

Grading Basis Decimal Grade
Class Limit 24
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Organizational roles in incident response
Laws and relevant regulations
Business Practices and Policies
Architecting for visibility
Common methodologies for:
1. Preparation and training
2. Analysis and detection of events
3. Incident containment, eradication, and recovery
4. Post-incident analysis
Testing detection and response capabilities
Developing response playbooks
Incident Reporting

Student Learning Outcomes
Explain the relevant laws, governance, and compliance regulations concerning incident response.

Understand the tactics, techniques, and procedures used by threat actors as well as the methodologies used by incident responders.

Research and report on cybersecurity threat actors such as advanced persistent threats and the defenses against them.

Effectively test the preventative and detective controls of networked systems using standard tools.

Review and report on security incidents, explaining the tactics, techniques, and procedures used in different layers of the system.

Investigate cyber security incidents and report on their impact.