Security Incident Analysis and Response

KUs necessary to impart the necessary skills and abilities for analyzing security incidents on a system or network to determine the weakness (technological or operational) that allowed the incident to occur and developing appropriate mitigations to prevent further incidents via that weakness

To complete this specialization area, you must complete all Foundational KUs, Technical Core, and Non-Technical Core KUs indicated below.

Knowledge Units

• Technical Core KUs
  • Must complete all Technical Core KUs
• Non-Technical Core KUs
  • Cyber Threats
  • Cybersecurity Planning and Management
• Optional KUs
  • Digital Forensics
  • Device Forensics
  • Host Forensics
  • Media Forensics
  • Network Forensics
  • Information Assurance Architectures
  • Intrusion Detection/Prevention Systems
  • Life-Cycle Security
  • Linux System Administration
  • Network Technology and Protocols
  • Operating Systems Hardening
  • Vulnerability Analysis
  • Windows System Administration