They say you don’t know what you don’t know and that saying applies here. I am usually one who does the attacking and have never given any thought at all to the other side of the coin. How many of us ever put any planning into actually being the victim of a cyber crime? The consequences can be huge. Far too many put this topic in the back of their mind, they just plan on hiring someone if it happens or pay it no worry because they “have insurance” against an attack.

The security of the data in your possession SHOULD be a priority. Petar (the instructor) walks you through assessing what your risk could be. Has a vulnerability scan ever been done? Do you have any end of life hardware in your possession that is a threat?

What about your data in general? Do you have research and development data that might be able to be stolen to give your competition an advantage? Do you have any health care info in your possession? Of course everyone worries about their financials.

Do you even know how to recognize that an incident has taken place? It is totally possible that your data is taken and you don’t even realize it. Have you trained your employees on best practices and maybe even given this enough thought that you have put together an incident response team! This alone was enough to get me wanting to learn more.

Overall the course is very thorough. You not only get the theory you also get an opportunity to practice everything you learn which will enable you to put what you have learned to work if ever warranted.

I am glad I took the time to work through this, it not only has given me a education on incident response but will actually even let me incident response to my list of services.