1
Q
Preparation Phase
A
Do training for employee process
Develop Incident response drill scenarios
Ensure everything approved and funded
2
Q
2nd part of Preparation phase
A
Gather Tools
Create Playbook
BC/DR planning
Tabletop workshop
CompTIA CySA+ CS0-003
flashcards
Decks in class (20)
# Cards
-
1. Cyber Security Concepts144
-
Common Vulnerability Scoring Systems13
-
2. Vulnerability Types and Concepts192
-
3. Managing Cyber Security Incident Response53
-
Cyber Kill chain method7
-
Diamond Model of Intrusion Analysis4
-
Preparation Phase2
-
Detection and Analysis5
-
Containment, Eradication and Recovery8
-
The eradication stage of Incident response plan4
-
The Recovery Process of Incident Response Plan5
-
Post-Incident Activity6
-
OWASP Top 10 2021 Vulnerabilities10
-
OWASP - The Testing framework Phases5
-
The MITRE ATT&CK framework7
-
MITRE ATT&CK Framework Techniques and Tactics14
-
4. Communicating Cyber Security Findings Effectively55
-
Communicate Incident Response Metrics and KPIs7
-
Udemy Exam 150
-
Udemy Exam 243
