ICS202 - ICS Incident Response Fundamentals Training in South Africa

  • Learn via: Classroom
  • Duration: 2 Days
  • Level: Fundamentals
  • Price: From €1,891+VAT
We can host this training at your preferred location. Contact us!

The ICS Security Incident Response Fundamentals course has been designed to provide those at Practitioner or equivalent level with an understanding of the current cyber incident response challenges facing their ICS environments. This includes an understanding of what an Incident is and how this approach may differ in an ICS Environment. This would also benefit those participating in or engaging with an ICS Incident Response team for the first time. This knowledge is vital when managing the day to day running of all aspects of security incident response for those environments.

This course will show students how to best protect and support their organisations cyber incident response process and provide an understanding of the stages of the IR process, including the information required to be able to create an effective IR plan. Template plans will be provided for student to complete and take away.

Siker have worked in partnership with the UK’s National Cyber Security Centre (NCSC) and the Centre for the Protection of National Infrastructure (CPNI) as well as leading Critical National Infrastructure companies to produce this short course.

There are no pre-requisites for this course. In addition, a course exercise handbook and ICS Continuity Plan template is provided.

Who Should Attend?

  • Anyone new to cyber security in an ICS Incident Response environment
  • Non-ICS staff who need to understand ICS terminology and how it differs from their current roles

If you are a professional working in an ICS environment including:

  • Site/Asset Operators
  • Procurement/Contract staff
  • Supply chain staff
  • Site/Asset IT Support engineers
  • Site/Asset Physical Security/Facilities Manager staff

We want staff who may be called in to help resolve a cyber incident to understand what it is they are walking into. This will help calm the panic and provide a swifter response to the incident which, in turn, leads to a quicker return to normal operations. This includes:

  • Being able to articulate the difference between an Incident and an Event and be able to identify both.
  • Understand the 6-stage process for Incident Response
  • Identify the key roles that make up a standard Incident Response Team
  • Understand the legal and regulatory aspects of cyber incident response
  • Handle different types of incidents

Module 1: Introduction to the Incident Handling Process

  • What is an Incident and an Event and how do they differ?
  • What is Incident Response?
  • The challenges of ICS Incident Response
  • The IR lifecycle

Module 2: Preparation

  • Obtaining Leadership support
  • ICS IR Plans
  • Who gets involved?
  • What makes the CSIRT?
  • Jump Kit and Grab Bag

Module 3: Identification

  • Classification Levels
  • Managing the Information Flow
  • Evidence

Module 4: Containment

  • What is Containment?
  • Short-term Containment
  • Long-term Containment
  • Investigations

Module 5: Eradication

  • The main aims of eradication
  • Remove or restore?
  • Improvement after

Module 6: Recovery

  • Recovery Objectives
  • Validation
  • Post-Incident Monitoring

Module 7: Lessons Learned

  • The Report
  • Management Considerations
  • Bringing it all together


Contact us for more detail about our trainings and for all other enquiries!

Upcoming Trainings

Join our public courses in our South Africa facilities. Private class trainings will be organized at the location of your preference, according to your schedule.

16 January 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
27 January 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
16 January 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
27 January 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
26 February 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
01 March 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
13 March 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom
19 March 2025 (2 Days)
Cape Town, Durban, Johannesburg
Classroom / Virtual Classroom

Related Trainings

ICS202 - ICS Incident Response Fundamentals Training Course in South Africa

Formerly known as Union of South Africa, now officially known as Republic of South Africa is the Southernmost country in Africa. South Africa's population is over 60 million people, which makes the country the world's 23rd-most populous nation. South Africa has three capital cities: executive Pretoria, judicial Bloemfontein and legislative Cape Town, while the largest city is Johannesburg. The official languages of South Africa are Afrikaans, English, Ndebele, Pedi, Sotho, Swati, Tsonga, Tswana, Venda, Xhosa and Zulu.

South Africa can be rainy from November to February, so the best time to visit South Africa is from May to September. Despite the rainy season South Africa is a year-round destination, with varying regional climates. Blyde River Canyon, Durban, Drakensberg, Kruger National Park and of course, Cape Town are the tourist attractions of the country.

Expand your IT knowledge with our comprehensive range of courses, including programming, software development, business skills, data science, cybersecurity, cloud computing and virtualization. Our skilled instructors will facilitate hands-on training and share practical insights, all conveniently conducted at your preferred location within South Africa.
By using this website you agree to let us use cookies. For further information about our use of cookies, check out our Cookie Policy.