< IT Security < Operational

This lesson covers incident response.

Objectives and Skills

Objectives and skills for the incident response portion of Security+ certification include:[1]

Summarize common incident response procedures.
  • Preparation
  • Incident identification
  • Escalation and notification
  • Mitigation steps
  • Lessons learned
  • Reporting
  • Recovery/reconstitution procedures
  • First responder
  • Incident isolation
    • Quarantine
    • Device removal
  • Data breach
  • Damage and loss control

Readings

Multimedia

  1. YouTube: Preparing for an Incident - CompTIA Security+ SY0-401: 2.5
  2. YouTube: Incident Identification - CompTIA Security+ SY0-401: 2.5
  3. YouTube: Incident Escalation and Notification - CompTIA Security+ SY0-401: 2.5
  4. YouTube: Incident Mitigation and Isolation - CompTIA Security+ SY0-401: 2.5
  5. YouTube: Lessons Learned from Incidents - CompTIA Security+ SY0-401: 2.5
  6. YouTube: Incident Reporting - CompTIA Security+ SY0-401: 2.5
  7. YouTube: Incident Recovery and Reconstitution - CompTIA Security+ SY0-401: 2.5
  8. YouTube: First Responder - CompTIA Security+ SY0-401: 2.5
  9. YouTube: Data Breaches - CompTIA Security+ SY0-401: 2.5
  10. YouTube: Incident Damage and Loss Control - CompTIA Security+ SY0-401: 2.5

Activities

See Also

References

This article is issued from Wikiversity. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.