Range-Powered Incident Handling for the GCIH® Certification


The MN Cyber GCIH® training program consists of a mix of classroom content and scenarios on the MN Cyber Range, with the goal to provide analysts authentic practice in responding to frequently encountered cyber-attacks.  The scenarios aim to challenge the trainees and give them practice and success in treating many attack vectors.  This course focuses on incident response performance while using common security operations center procedures and understanding the critical processes in the organization, emphasizing teamwork, effective communication skills including appropriate escalation, and the need for institutional learning via detailed debriefing.

Courses are face-to-face, and attendance is required.

This non-credit course will prepare you to take the GCIH® certification exam.  This is a vendor-neutral and globally recognized industry certification.

*Certification exam is not included in the course price.

Length: 42 total hours

This course will significantly benefit security operations center analysts and managers at all levels.

Security Techniques Acquired:

  • The steps of the incident handling process
  • Detecting malicious applications and network activity
  • Common attack techniques that compromise hosts
  • Detecting and analyzing system and network vulnerabilities
  • Continuous process improvement by discovering the root causes of incidents

Course plan:

  1. Introduction to Incident Response Handling
  2. Risk Assessment
  3. Incident Response and Handling Steps
  4. Computer Security Incident Response Team Roles and Functions
  5. Handling Network Security Incidents
  6. Handling Malicious Code Incidents
  7. Handling Insider Threats
  8. Forensic Analysis and Incident Response
  9. Incident Reporting
  10. Incident Recovery
  11. Development and Implementation of Effective Security Policies Through the Lens of a Cyber Attack

Work experience in the Information Security Domain

Price: $3250.00  Early Bird: $2925.00 until 21 days prior to beginning of course

Please Note:

  • If you are registering through the workforce center, you must have your counselor contact IPD directly at institute@metrostate.edu

Session on:

  • Monday, April 8, 2019 until Friday, April 12, 2019 from 8:30 a.m. until 4:00 p.m. each day
  • Monday, May 6, 2019 until Friday, May 10, 2019 from 8:30 a.m. until 4:00 p.m. each day

If you want to customize this course specifically for your organization, contact kyle.swanson@metrostate.edu or info@mncyber.org