Incident Coordination

What to expect

The first day of this course is mostly instructor lectures with intermittent group discussions. On the second day, participants will form into small groups of 3-4 members each to complete a series of tasks designed to test their ability to communicate while under pressure. After each task, we’ll review lessons learned.

This is mainly a nontechnical class. Come prepared to share experiences within the IC framework.

Technical Content intermediate


  • CIOs
  • CISOs
  • ISSMs
  • Incident Response leaders
  • Operational Technical Staff
  • Managers
  • Anyone who might find themselves in coordination and communication settings related to incident response


This class is to help assist IR personnel that are responsible for coordination and communication in incidents. Often the technical aspects of an incident work themselves out but it is the human side of an incident that can be frustrating. There are processes and best practices that you can learn to help you maneuver through the maze of incident coordination and creating and working an incident response plan. If you are a new or seasoned IT operations or security manager, or are called to represent your team for communications, notifications, or coordination, this class is for you!


  • Understand best practices for managing incident response efforts
  • Have familiarity with team dynamics in crisis situations
  • Understand standard reporting mechanisms, templates, and how to use them

Typical Agenda

Day 1

  • Lecture
  • Miniature scenarios

Day 2

  • Lecture
  • Miniature scenarios
  • Incident Coordination tabletop exercise

Day 3

  • To Be Announced


Laptop is required