Skip to content

PROGRAM MODULE · EN / ES · SEC4

Response and recovery

Document simulated containment and verifiable recovery.

Part of Defensive cybersecurity and IT/OT introduction.

Sign in or check my student access →

MODULE SYLLABUS

Lessons and objectives

Review the sequence before you start. Each link opens the corresponding lesson in the protected student guide; a verified account and active membership are required.

  1. SEC4-1 · 4 h

    Incident classification

    • Classify observations without treating an alert as proof of intrusion and justify review priority.
    Open lesson · Academy access →
  2. SEC4-2 · 4 h

    Evidence preservation

    • Preserve original bytes, verify copies and record an instructional handling trail.
    Open lesson · Academy access →
  3. SEC4-3 · 4 h

    Test-backup recovery

    • Restore a test backup without overwriting the original and verify integrity and usefulness.
    Open lesson · Academy access →
  4. SEC4-4 · 4 h

    Technical communication

    • Write a technical update separating facts, uncertainty and the requested decision.
    Open lesson · Academy access →

PREPARATION

Before you begin

Functional reading, basic arithmetic and file management. Complete an entry diagnostic.

This module follows Logs and alerts. Review the earlier material if you need to strengthen the foundations.

Read the explanations and examples before practicing. Keep your results and limitations in your own file: these pages do not automatically record attendance, progress or grades.

STUDENT MATERIALS

Continue to guided learning

This syllabus is public. Full explanations, exercises, downloads and simulators retain Academy access controls: an active verified account, active membership and the appropriate permissions. Cohort enrollment is not open.