Incident response: Containment, eradication and recovery
Course description
This training provides participants with the skills needed to effectively manage cybersecurity incidents through containment, eradication and recovery strategies. These three phases are critical for minimising damage, eliminating threats and restoring normal operations.
Learning outcomes
Participants will learn:
- Containment techniques to prevent incidents from spreading, such as isolating compromised systems
- Eradication methods to completely remove threats from affected networks and devices
- Recovery strategies to restore operations securely while preventing future incidents
- Best practices for evidence handling and vulnerability mitigation to strengthen long-term security
Further instructions
The training is free of charge and offered as self-paced e-learning available on demand from April 2025 to October 2025 with a duration of approximately 1 hour.
