Building & Optimising Incident Response Playbooks

Everything you need to know about creating Incident Response Playbooks

Learn to Create NIST Compatible Incident Response Playbooks

Get Started

The Building and Optimising Incident Response Playbooks training course, teaches you how to create NIST SP 800-61 R2 and NIST CSF compatible incident response playbooks to respond to a variety of simple and complex cyber-attacks and data breaches.

Benefits of choosing the E-Learning Option

Benefits of choosing the E-Learning Option


Full access to all content (downloadable PDFs) for 60 calendar days


You can complete it as and when it’s possible, around your working hours or during.


Access to regular live-discussions with global experts via our educational webinars.

You are able to relate it to your business more as you have longer to complete (and consume) the training rather than it being a 1-day virtual event. If you would prefer to attend a virtual class AND have the E-Learning included, you can select that option here once you have selected a date.



Get Started

Highlights of the E-Learning CIPR course


Certified by the UK-Government's National Cyber Security Centre (NCSC).


Accredited by the Chartered Institute of Information Security (CIISec).


12 modules designed specifically to cover this topic.


Attendance Certificate on course completion


Learn how to create basic and advanced cyber incident response playbooks..


Create NIST compatible fit-for-purpose incident response playbooks

* Please note you must complete the course and obtain a certificate of completion before sitting for the exam



Get Started
  • Key Learning Objectives
  • Downloads
  • About
  • Key Learning Objectives

    • Learn what it takes to create, review and optimise cyber incident response playbooks.
    • Understand the technology that can underpin the creation, optimisation and automation of playbooks.
    • In your own words, you will be able to explain and discuss the:
    • Key components of an incident response playbooks.
    • Importance and role of effective playbooks in increasing organisational cyber resilience.
    • Importance and role of fit-for-purpose, effective playbooks in increasing compliance with breach notification requirements, like the 72 hours data-breach-notification requirement from the GDPR.
    • Benefits of having a structured, repeatable way to respond to cyber-attacks.
    • Benefits of Incident response playbooks and how they impact staff efficiency.
    • Benefits of using technological solutions to create, automate and improve playbooks.
    • Use the the knowledge gained from this workshop to
    • Create basic and advanced cyber incident response playbooks.
    • Work with and contribute to better articulated risk management.
    • Host and run ongoing workshops to continually review and improve response playbooks.
    • Assess, deploy and implement automation in incident response and playbooks.
    • Review and improve existing incident response playbooks.

    Furthermore, this course is the perfect fllow on course to our NCSC-Certified Cyber Incident Planning and Response course.

  • Direct Downloads

    Directly download the full Learning Objectives of the course here

    Download the course details leaflet here

  • About

    (ISC)2 & ISACA Members: You can claim 8 CPE points after they complete the whole course and obtain the attendance certification.

Example Curriculum

  *** Important ** Please read this first
Available in days
days after you enroll
  Welcome Introduction - Goals, Learning Objectives & Trainer Details
Available in days
days after you enroll
  Module 1 - Case Study
Available in days
days after you enroll
  Module 2 - The Basics
Available in days
days after you enroll
  Module 3
Available in days
days after you enroll
  Module 4
Available in days
days after you enroll
  Module 5
Available in days
days after you enroll
  Module 6
Available in days
days after you enroll
  Module 7
Available in days
days after you enroll
  Module 8
Available in days
days after you enroll
  Module 9
Available in days
days after you enroll
  Module 10
Available in days
days after you enroll
  Module 11
Available in days
days after you enroll
  Module 12
Available in days
days after you enroll
  Additional Collateral
Available in days
days after you enroll
  Attack Timelines - New
Available in days
days after you enroll

Sign up and Start Today


Pay-in-full in your local currency (where available)


We take all major forms of payment and we use secure checkout.