Module 1: Identify
Lab:

Associated Topics:

Module 2: Protect
Lab:

Associated Topics:

Vulnerability scanning
Vulnerability scanning personnel
Vulnerability scanning tools
Configuring monitoring systems and alert criteria
Implementing, configuring, and monitoring security tools and systems
Developing use cases for security monitoring
Incident response plan development
Incident response plan testing
Incorporation of security considerations into business functions
Monitoring user access, privileges, and permissions
Monitoring compliance with security procedures and requirements
Development of security training
Evaluating security configurations against established configuration standards and baselines

Module 3: Detect
Lab:

Associated Topics:

Assessing threat level and potential impact of anomalous behavior and security events
Researching, analyzing, and correlating system activity and security events
Monitoring and analyzing outputs from security tools, systems, and logs
Analyzing malicious activity to determine weaknesses and exploitation methods

Module 4: Respond
Lab:

Associated Topics:

Notifying appropriate incident response teams according to established protocols
Identifying and implementing appropriate containment measures, countermeasures, and corrective actions
Collecting and preserving digital evidence according to relevant regulations and laws
Conducting post-incident analysis
Communicating and documenting notifications and outcomes of incident response

Module 5: Recover
Lab:

Associated Topics:

CSX-P: Certified Cybersecurity Practitioner