Cybersecurity Incident Response and Recovery
When a security breach occurs, a prepared and practised response limits the damage. This course covers how to detect, contain, and recover from cyber incidents. Participants study response planning, forensics basics, and communication during a breach.
Course outline
What this programme covers, module by module.
- 01Building and testing an incident response plan
- 02Detecting and classifying security incidents
- 03Containing and eradicating active threats
- 04Preserving evidence for later investigation
- 05Recovering systems and restoring normal service
- 06Communicating with stakeholders during a breach
- 07Running a post incident review to learn
What you will gain
- Build an incident response plan
- Detect and classify security incidents
- Contain and eradicate threats
- Preserve evidence for investigation
- Recover systems and services
- Communicate during and after an incident
Who should attend
- Security and IT staff
- Incident response team members
- IT managers
- Risk and continuity professionals
Upcoming sessions
| Date | City | Duration | Fees | Book |
|---|---|---|---|---|
| 27 to 29 Oct 2026 | London | 3 Days | US$1,500 | |
| 16 to 18 Nov 2026 | Dubai | 3 Days | US$1,500 | |
| 30 Nov to 2 Dec 2026 | Pretoria | 3 Days | R13,000 | |
| 11 to 13 Jan 2027 | Durban | 3 Days | R13,000 | |
| 8 to 10 Mar 2027 | Cape Town | 3 Days | R13,000 | |
| 4 to 6 May 2027 | Johannesburg | 3 Days | R13,000 | |
| 19 to 21 Jul 2027 | London | 3 Days | US$1,500 |
Fees are per delegate and exclude VAT. Public intakes are confirmed once minimum numbers are met. We also deliver this course on your own schedule, in-house or live online.
Enquire about this course
Register your team or ask for a tailored in-house quote. We reply within one working day.
WhatsApp usCourse brochure (PDF)- Fees from
- R13,000 per delegate
- Duration
- 3 Days
- Field
- IT & Digital Skills
- Formats
- In-house, public, online
More in IT & Digital Skills
Cybersecurity Fundamentals for Professionals
Every organisation now depends on systems and data that attackers actively seek to exploit. This course builds a practical understanding of cyber threats and the defences that reduce them. Participants study common attacks, security controls, and the response to incidents.
Spreadsheet to Database Migration for Teams
Teams outgrow a shared spreadsheet long before they admit it, usually at the point where two people are editing different copies. This course covers moving that work into something that holds.
Cloud Computing Foundations
Cloud services have changed how organisations build, run, and pay for technology. This course explains the concepts, models, and benefits of cloud computing in plain terms. Participants examine service models, deployment options, and the basics of cost and security.



