Module 1: Assessment of Information Security Risks

Module 2: Response to Cybersecurity Incidents

Module 3: Investigating Cybersecurity Incidents

Module 4: Complying with Legislation

Examples of Legislation (if this is covered in above topics, no need to include here) GDPR, HIPPA, Elections
Case study: Incident Response and GDPR (Using GDPR legislation, create a response that is compliant with it – this could be discussion-based activity as well.)
State Legislation Resources and Example – Search terms to find state legislation
- Using NYS as example use the NYS Privacy Response act or other legislation to create a similar case study as previous.
- Provide answers on when to use federal versus state and do you have to follow both?

IRBIZ: Incident Response for Business Professionals