Skip to main content

Responding to an incident: the first minutes and the alert chain

1 / 14

Match to my job

Your job, across every course

The examples adapt to your job across every course. What is taught does not change, and you keep your place.

Kept for 180 days in a preference cookie, set only when you confirm.

To begin

The delay costs more than the mistake

Almost everyone will click one day: making the click feel natural is the attacker's job. What separates a minor incident from a major one is not the click, it is the time that passes before the alert. An alert raised for nothing costs a few minutes; an alert raised too late costs your structure days of work.