MGT535: Incident Response Team Management

A session at SANS Security West 2013

  • Staff

Wednesday 15th May, 2013

9:00am to 5:00pm (PST)

This course will take you to the next level of managing an incident response team. Given the frequency and complexity of today's attacks, incident response has become a critical function for organizations. Detecting and efficiently responding to incidents, especially those where critical resources are exposed to elevated risks, has become paramount, and to be effective, incident response efforts must have strong management processes to facilitate and guide them. Managing an incident response team requires special skills and knowledge. A background in information security management or security engineering is not sufficient for managing incidents. Furthermore, incident responders with strong technical skills do not necessarily become effective incident response managers. Special training is necessary.

This course was developed by an information security professional with over 26 years of experience, much of it in incident response. He was the founder of the first U.S. government incident response team. Students will learn by applying course content through hands-on skill-building exercises. These exercises range from: writing and evaluating incident response procedures, to the table-top validation of procedures, incident response management role playing in hypothetical scenarios, and hands-on experience in tracking incident status in hypothetical scenarios.

About the speaker

This person is speaking at this event.

Sign in to add slides, notes or videos to this session

Tell your friends!


Time 9:00am5:00pm PST

Date Wed 15th May 2013

Short URL


Official event site


View the schedule


See something wrong?

Report an issue with this session