This programme equips IT professionals and security teams with the structured skills to detect, contain, investigate, and recover from cybersecurity incidents. Covering the full incident response lifecycle and an introduction to digital forensics, participants will leave with practical procedures they can implement immediately in their organisation.
HRD Corp SBL-Khas Claimable
Incident Response Fundamentals
The incident response lifecycle: preparation, detection, containment, eradication, recovery, and post-incident review. Building an incident response plan from scratch.
Threat Detection and Analysis
Identifying indicators of compromise (IoC), analysing logs and alerts, using SIEM tools, and distinguishing true positives from false positives.
Containment and Eradication
Short-term and long-term containment strategies. Removing malware, closing attack vectors, and restoring systems safely without destroying forensic evidence.
Introduction to Digital Forensics
Forensic principles, chain of custody, evidence preservation, disk imaging, memory forensics basics, and working with forensic tools including Autopsy and Volatility.
Ransomware and Malware Incident Handling
Step-by-step response to ransomware attacks including isolation, communication, recovery options, and post-incident hardening. Real Malaysian and regional case studies.
Reporting and Post-Incident Review
Writing an incident report, communicating with management and regulators, lessons learned documentation, and updating defences based on findings.
Incident Response Tabletop Exercise. Participants work through a simulated ransomware attack scenario in teams. Each team must detect, contain, investigate, and report the incident following proper procedures, with a full debrief at the end.
Fee RM 1,750 per participant
Minimum enrolment 3 participants
Duration 2 Days
Level Intermediate (basic IT security knowledge required)
HRD Corp Claimable Yes
Certificate included Yes
