Certified Incident Responder (CIR)
Master cyber incident response: strategic handling, ransomware and malware response, perimeter threat detection, forensics and continual improvement, through hands-on scenarios.
Who is this course for?
- Incident responders and SOC analysts
- Security engineers and blue team members
- Consultants supporting incident response
- Professionals building an incident response career
What you'll gain
- The PECB Certified Incident Responder (CIR) credential, recognised internationally
- The ability to detect, analyse and respond to incidents
- Hands-on skills in ransomware, malware and forensic response
- A strong incident response profile
Course programme
Day 1 · Fundamentals of incident response and strategic handling
- Incident response concepts and lifecycle
- Building an incident response capability
- Strategic incident handling
Day 2 · Ransomware and malware incident response
- Analysing ransomware and malware
- Containment and eradication
- Recovery from malware incidents
Day 3 · Perimeter threat detection, analysis and response
- Detecting perimeter threats
- Analysing malicious activity
- Responding to intrusions
Day 4 · Persistent mechanisms, forensics and continual improvement
- Investigating persistence and forensics
- Lessons learned and reporting
- Continual improvement of the capability
Day 5 · Certification exam
- Practical review
- Official "PECB Certified Incident Responder (CIR)" exam
Exam, credits & certification
Once you pass the exam, you can apply for the "PECB Certified Incident Responder (CIR)" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the course level according to PECB. The exam duration is indicative; ask me for the exact details when you enrol.
Your trainer
Ricardo Coronel Lemus
More than 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach these standards theoretically: I apply them day to day with real clients: that's what I bring to the coaching and exam preparation I offer.
Not ready to decide? Get all the information by email
I will send you the full syllabus, available dates and the price of Certified Incident Responder (CIR), with no obligation.
Frequently asked questions
Do I need any prerequisites?
What language is the exam in?
What is the difference between Self-Study and Self-Study + Coaching?
What if I don't pass the exam?
Is CIR aligned with real-world incident response?
Ready to lead incident response?
Choose your option above and enrol online. A question or need some advice? Write to me or book a call.