Live Online Courses

BCT Certificate in Cyber Incident Management (NCSC Certified Training)
Live Online Course

Certified 2 Days £1,250.00 (+ VAT)

Course Overview/Dates

A two day non-technical course, aimed at preparing organisations to manage their cyber response at the strategic/crisis management level. Topics include cyber risk assessments, playbook development, GDPR reporting incidents and reputation management. The course includes a 1 hour multiple choice exam taken individually after the training.

This training course is delivered as a two day, live online training course. Scheduled breaks will be provided within each session. During the course, delegates will be able to use their microphones to take part in discussions and ask the tutor any questions, there is also the option to use a webcam too. Interactivity features used during the training may include the use of breakout sessions for group work, polls and quizzes. The course is delivered via GoToTraining.

Timings are indicative and exact timings may vary due to student experience and their interest in certain topics. The course may finish earlier if all topics have been covered.

Timetable

Day 1 09.30-12.30 BST 13.30-16.30 BST
Day 2 09.30-12.30 BST 13.30-16.30 BST

What's included?

  • Course slides
  • Exam
  • Certificate

Course Dates

Dates Number of days Location Price
Wed 10 Nov 2021
£1,250.00 Book
Course tutor: Charlie Maclean-Bristol MA (Hons), PgD, FBCI, FEPS
Mon 28 Feb 2022
£1,250.00 Book
Course tutor: Charlie Maclean-Bristol MA (Hons), PgD, FBCI, FEPS
Mon 6 Jun 2022
£1,250.00 Book
Course tutor: Charlie Maclean-Bristol MA (Hons), PgD, FBCI, FEPS
Mon 5 Sep 2022
£1,250.00 Book
Course tutor: Charlie Maclean-Bristol MA (Hons), PgD, FBCI, FEPS
Mon 5 Dec 2022
£1,250.00 Book
Course tutor: Charlie Maclean-Bristol MA (Hons), PgD, FBCI, FEPS
Back to top

Details & Programme

Over the last few years the number of cyber incidents has grown, affecting organisations large and small. High profile incidents such as Sony, TalkTalk, and the Petya and NHS ransomware attacks, have had a major impact on the operations and reputation of the organisations.

"Thankfully, we now live in a world where it is accepted that data breaches happen and organisations are more comfortable disclosing that they have been victim to an attack. However, with this welcome move away from victim blaming, organisations are now being judged more on how well they manage a breach." - Brian Honan, ComputerWeekly

This training course is not a technical response, but looks at the actions organisations can take to prepare themselves, and how they should manage a cyber incident, including very importantly, how to manage communications associated with the incident. It will also look at the types of cyber attacks, the cyber landscape and how to exercise your cyber response plan.

Delegates will learn how to prepare their organisation, how to develop an effective response and how to manage an incident should it occur.

The course is based on good practice from a variety of government and private organisations. This course has been certified by NCSC and is the only certified course which deals with reputational issues associated with the preparing for and responding to a cyber incident.

The course includes a 1 hour multiple choice exam taken individually after the training. Once you have been registered for the exam (usually on Day 1 of the course), you will have 60 days to complete it.

Modules

Module 1: Cyber Threats and Landscape

  • Definitions
  • Number of different case studies
  • Different types of cyber threats
  • Who are the different threat actors?
  • What are the threat vectors
  • Cyber incident impacts
  • Cyber threats to your industry
  • Cyber video and discussion

Module 2: Prepare - Understanding your vulnerabilities and risks

  • Understanding your organisation’s vulnerabilities
  • Questions to ask to understand your information security culture, cyber preparation and awareness
  • Incident reporting helpline
  • Measuring cyber preparation and maturity
  • Understanding what you have to lose and conducting a cyber data risk assessment

Module 3: Prepare - Developing a cyber incident response framework

  • Reviewing and developing your cyber policy and guidance
  • Developing a cyber incident response team
  • Developing scenario responses
  • Developing decision and scenario based playbooks
  • Third party support, insurance and cyber intelligence

Module 4: Prepare - Awareness and Cyber Exercises

  • What do senior managers need to know about cyber
  • Cyber exercise scenarios
  • Styles of exercises
  • Exercising at different levels within the organisation
  • Making exercises realistic
  • Hints and tips for successful exercises

Module 5: Respond - Overview of incident management and technical cyber response

  • Incident response overview - what are we trying to achieve
  • Difference between a cyber and a 'normal' incident
  • React, Respond, Resolve framework for managing incidents
  • Identifying the cyber incident
  • Triaging incidents
  • Cyber impact assessment
  • Kill Chains and Diamond Model
  • Forensics, investigations and third-party response

Module 6: Respond - Executive Incident Management

  • Situational awareness and OODA loop
  • Use of situation - direction - action
  • Incident decision making
  • Information management
  • Setting of incident objectives
  • Statutory and regulatory reporting including GDPR requirements

Module 7: Respond - Crisis Communications and Reputation Management

  • Communications case study- Equifax
  • Communications pre-incident preparation
  • Managing your organisation's communications with customers, stakeholders and the media
  • Stakeholder information requirements
  • Developing a communications strategy
  • Cyber attack 'victim or villain'

Module 8: Recovery - Using existing BC plans to recover operations

  • Use of existing business continuity plans, DR and crisis plans to help lessen the impact of the incident

Final response exercise

  • Exercise Athena - opportunity to bring all the knowledge together during an exercise
Back to top

Course Benefits

Completing this course will enable you to:

  • Understand the different types of cyber attack and cyber incident landscape
  • Look at the preparation which can be carried out prior to a cyber incident occurring
  • Create a cyber playbook
  • Identify the responses and issues associated with responding to a cyber attack
  • Plan and run a cyber exercise

What are the benefits of choosing NCSC Certified Training?

  • Individuals and organisations can easily and quickly identify high quality, relevant training
  • The course materials have been rigorously assessed against the exacting standards of NCSC
  • The quality of the trainers’ delivery and the course administration has been quality checked
  • The training is based on the industry-respected IISP Skills Framework
  • NCSC certified training is invaluable for anyone seeking to acquire or improve their cyber security skills, including those seeking the NCSC's Certified Professional status (CCP)
  • NCSC certified courses identify training which delivers what it says it will
Back to top

Who Should Attend?

  • Business continuity and resilience managers
  • IT managers
  • CIOs and CTOs
  • Crisis managers
  • Members of crisis management teams or those responsible for crisis management and crisis communications
Back to top

Exam

Is the cost of the exam included in the cost of the course?

The cost of the exam is included in the course cost.

What does the exam consist of?

The examination consists of 50 multiple choice questions which the candidate will have 1 hour to complete.

What is the pass mark?

A score of 70% is required to pass the exam.

Is it a closed or open book exam?

The exam is closed book.

What language can I sit the exam in?

The exam is only available in English.

When can I take the exam?

The exam is taken online by delegates individually after the training.

Back to top

Tutors

Charlie Maclean-Bristol

Charlie Maclean-Bristol

MA (Hons), PgD, FBCI, FEPS

Back to top

Locations

The Future of Incident & Crisis Management Rooms Post COVID - In a Hybrid Working World

The Future of Incident & Crisis Management Rooms Post COVID - In a Hybrid Working World

Is Business Continuity One of the Victims of COVID?

Is Business Continuity One of the Victims of COVID?

Fantasy Crisis Communications - Prince Andrew

Fantasy Crisis Communications - Prince Andrew

quote for CBCI Certification Course (GPG), London, 18th-21st October 2021

quote for CBCI Certification Course (GPG), London, 18th-21st October 2021

quote for CBCI Certification Course (GPG), Live Online, 18th-22nd October 2021

quote for CBCI Certification Course (GPG), Live Online, 18th-22nd October 2021

Embedding BC for a More Resilient Future

Embedding BC for a More Resilient Future

Dealing with Anniversaries

Dealing with Anniversaries

Preparation for Protest

Preparation for Protest

Low-Level Cyber Attacks

Low-Level Cyber Attacks

quote for BCI Business Impact Analysis (BIA), Live Online, 4th-5th October 2021

quote for BCI Business Impact Analysis (BIA), Live Online, 4th-5th October 2021

BCI Education Month, September 2021

BCI Education Month, September 2021

quote for CBCI Certification Course (GPG), Live Online, 18th-22nd October 2021

quote for CBCI Certification Course (GPG), Live Online, 18th-22nd October 2021

What Can We Learn? - Afghanistan 2021

What Can We Learn? - Afghanistan 2021

A Guide to Writing Contingency Plans/Playbooks

A Guide to Writing Contingency Plans/Playbooks

quote for Advanced Incident Response and Crisis Management, Live Online, 8th-9th November 2021

quote for Advanced Incident Response and Crisis Management, Live Online, 8th-9th November 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

Building Resilience and Security for Long-Term Remote Working

Building Resilience and Security for Long-Term Remote Working

quote for PECB Certified ISO 22301 Lead Implementer, Live Online, 15th-18th November 2021

quote for PECB Certified ISO 22301 Lead Implementer, Live Online, 15th-18th November 2021

‘Countdown to Zero Day’ By Kim Zetter - Book Review

‘Countdown to Zero Day’ By Kim Zetter - Book Review

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

Cyber Podcasts You Need To Listen To!

Cyber Podcasts You Need To Listen To!

Catalogue request from Becca

Catalogue request from Becca

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for BCI Developing and Managing the Business Continuity Plan, Live Online, 6th October 2021

quote for BCI Developing and Managing the Business Continuity Plan, Live Online, 6th October 2021

quote for IT Disaster Recovery, Live Online, 8th-9th November 2021

quote for IT Disaster Recovery, Live Online, 8th-9th November 2021

Location, Location, Location!

Location, Location, Location!

A Checklist for the Loss of People

A Checklist for the Loss of People

Kaseya Attack: What is a Supply Chain Cyber Attack?

Kaseya Attack: What is a Supply Chain Cyber Attack?

NEW COURSE ANNOUCEMENT - COVID vs. Influenza: The rematch is on!

NEW COURSE ANNOUCEMENT - COVID vs. Influenza: The rematch is on!

Is Crisis Management Only For “Unprecedented and Extraordinary Events”?

Is Crisis Management Only For “Unprecedented and Extraordinary Events”?

quote for BCI Introduction to Business Continuity Management, Live Online, 9th-10th August 2021

quote for BCI Introduction to Business Continuity Management, Live Online, 9th-10th August 2021

The Importance of Incident Response Training for First Responders

The Importance of Incident Response Training for First Responders

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

quote for BCI Introduction to Organisational Resilience, Live Online, 13th October 2021

BrewDog Crisis Communications: Case Study Review

BrewDog Crisis Communications: Case Study Review

quote for BCI Incident Response and Crisis Management, Live Online, 12th-13th August 2021

quote for BCI Incident Response and Crisis Management, Live Online, 12th-13th August 2021

quote for CBCI Certification Course (GPG), Live Online, 19th-23rd July 2021

quote for CBCI Certification Course (GPG), Live Online, 19th-23rd July 2021

quote for CBCI Certification Course (GPG), Live Online, 19th-23rd July 2021

quote for CBCI Certification Course (GPG), Live Online, 19th-23rd July 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

quote for CBCI Certification Course (GPG), Live Online, 16th-20th August 2021

Hypercomplexity: Which Incidents Should We Be Preparing For?

Hypercomplexity: Which Incidents Should We Be Preparing For?

Process Controls, SCADA and Cyber Security

Process Controls, SCADA and Cyber Security

Shortlisted - CIR Business Continuity Awards 2021

Shortlisted - CIR Business Continuity Awards 2021

The Differences Between a Cyber and a 'Normal' Incident

The Differences Between a Cyber and a 'Normal' Incident

UPDATED COURSE - BCT Certificate in Cyber Incident Management (NCSC Certified Training)

UPDATED COURSE - BCT Certificate in Cyber Incident Management (NCSC Certified Training)

How to Beat Crisis Fatigue and Build Resilience with Microsimulations

How to Beat Crisis Fatigue and Build Resilience with Microsimulations

Business Continuity Awareness Week

Business Continuity Awareness Week

How to Develop a Highly Effective Crisis Management Team

How to Develop a Highly Effective Crisis Management Team

Isle of Coll Fire - A view from the frontline

Isle of Coll Fire - A view from the frontline

BCI Europe Award 2021 – Continuity and Resilience Provider

BCI Europe Award 2021 – Continuity and Resilience Provider

Communications with Stakeholders after a Ransomware Attack

Communications with Stakeholders after a Ransomware Attack

quote for CBCI Certification Course (GPG), Live Online, 29th November - 3rd December 2021

quote for CBCI Certification Course (GPG), Live Online, 29th November - 3rd December 2021

quote for CBCI Certification Course (GPG), Live Online, 29th November - 3rd December 2021

quote for CBCI Certification Course (GPG), Live Online, 29th November - 3rd December 2021

Catalogue request from Rebecca

Catalogue request from Rebecca

The Hidden Costs of Ransomware

The Hidden Costs of Ransomware

quote for CBCI Certification Course (GPG), Live Online, 14th-18th June 2021

quote for CBCI Certification Course (GPG), Live Online, 14th-18th June 2021

quote for CBCI Certification Course (GPG), Live Online, 10th-14th May 2021

quote for CBCI Certification Course (GPG), Live Online, 10th-14th May 2021

quote for Advanced Incident Response and Crisis Management, Live Online, 14th-15th June 2021

quote for Advanced Incident Response and Crisis Management, Live Online, 14th-15th June 2021

Writing Incident Scenarios: An Operational Resilience Trend Returns

Writing Incident Scenarios: An Operational Resilience Trend Returns

Catalogue request from Becca

Catalogue request from Becca

It's OK, it’s in the Cloud: Lessons from the Fire in the OVHcloud Data Centre

It's OK, it’s in the Cloud: Lessons from the Fire in the OVHcloud Data Centre

Catalogue request from Steff

Catalogue request from Steff

Operational Resilience: Is it just business continuity done properly?

Operational Resilience: Is it just business continuity done properly?

Demonstrating business continuity's return on investment

Demonstrating business continuity's return on investment

Credential Stuffing - A different type of cyber attack

Credential Stuffing - A different type of cyber attack

quote for CBCI Certification Course (GPG), Live Online, 22nd-26th March 2021

quote for CBCI Certification Course (GPG), Live Online, 22nd-26th March 2021

quote for BCI Policy and Programme Management, Live Online, 10th June 2021

quote for BCI Policy and Programme Management, Live Online, 10th June 2021

Catalogue request from Mohammed

Catalogue request from Mohammed

Our Tutors

Our Tutors

We want to hear from you!

We want to hear from you!

quote for CBCI Certification Course (GPG), Live Online, 14th-18th June 2021

quote for CBCI Certification Course (GPG), Live Online, 14th-18th June 2021

BC Training delivers our first NCSC Certified Managing and Preparing for Cyber Incidents course

BC Training delivers our first NCSC Certified Managing and Preparing for Cyber Incidents course

Overview / News

Overview / News

The changing face of journalism and how it should be reflected in our plans

The changing face of journalism and how it should be reflected in our plans

Catalogue request from robert olobo

Catalogue request from robert olobo

Beware of the self-wiggling mouse – Cyber vulnerabilities in the water industry

Beware of the self-wiggling mouse – Cyber vulnerabilities in the water industry

About Overview

About Overview

Catalogue request from Orla McAuliffe

Catalogue request from Orla McAuliffe

Business Continuity Capability – What is it and do I need it?

Business Continuity Capability – What is it and do I need it?

quote for NCSC Certified Managing & Preparing for Cyber Incidents, Live Online, 1st-2nd March 2021

quote for NCSC Certified Managing & Preparing for Cyber Incidents, Live Online, 1st-2nd March 2021

Failing to plan is… The importance of contingency planning – The quarantine debacle

Failing to plan is… The importance of contingency planning – The quarantine debacle

quote for BCI Incident Response and Crisis Management, London, 22nd-23rd April 2021

quote for BCI Incident Response and Crisis Management, London, 22nd-23rd April 2021

Back to top