FΛForgeAwareness
Get started
Locked

Incident Response Playbook

Know what to do when a security incident happens. Recognize an incident, report it immediately, and follow procedures.

All employees · ~12 min · 5 modules

This course is part of the paid catalog. Purchase it individually, or unlock it with a membership that includes Tier 1 content.

View pricing & purchaseSee membership plans

What's inside

  1. 01
    What is a Security Incident?
    Recognize when something bad is happening with security.
    ~3 min
  2. 02
    The First 5 Minutes: Report and Contain
    What you do immediately when you notice something wrong.
    ~3 min
  3. 03
    Classification: Is This Actually Bad?
    How security determines if this is serious.
    ~2 min
  4. 04
    Notification and Communication
    What happens after: notification, communication, follow-up.
    ~2 min
  5. 05
    Your Incident Response Checklist
    Quick reference for what to do.
    ~2 min