Cyber Incident Response: A 360° Walkthrough from Breach to Recovery
Ever wondered what actually happens when a cyber incident hits?
See a cyber incident the way your client lives it, and see exactly how response plans unfold, what decisions get made under pressure, and why every requirement you ask for in underwriting truly matters.
Built for brokers, underwriters, and risk managers, this course connects policy language to practical action. You’ll see how plans, procedures, and insurance all come together when it counts.
Sign up today and gain the knowledge to better assess risk, shape coverage, and support client resilience with confidence!
Available in
English
French
Spanish
Course Overview
Cyber incidents can unfold rapidly, requiring organizations to respond across technical, legal, operational, and strategic fronts. This practical, scenario-driven course follows a ransomware incident as it develops, providing a clear view of how organizations and insurance professionals navigate the complex decisions and actions required during a cyber crisis.
You’ll examine how key organizational plans, such as the Cyber Incident Response Plan, Business Continuity Plan, Disaster Recovery Plan, and Crisis Management Plan, are activated under pressure. As the scenario progresses, the course explores the coordination required between internal teams, external specialists, and insurers to contain, eradicate, and recover from a cyber event.
By walking through the incident step by step, you’ll gain insight into how cyber insurance responds in real-world situations and what underwriters look for when evaluating cyber risk and incident preparedness. This practical approach helps demystify the response process while building a clearer understanding of the roles, decisions, and actions involved in managing a ransomware crisis.
Course highlights
Incident Escalation
Response Plans in Action
Roles and Coordination
Insurance Triggers and Documentation
Upgrade
From $35 US a month
Learning Objectives
Upon completing this course, you will be able to:
- Identify when a cyber event becomes an incident, breach, or crisis, and what that means for response and insurance;
- Explain the NIST Incident Response Lifecycle and apply it to real-world ransomware scenarios;
- Illustrate when and how to activate key organizational plans;
- Explain the roles of an Incident Response Team and a CMT, and how they coordinate during a cyber crisis;
- Describe cyber insurance requirements confidently, including when to notify, how to engage vendors, and what’s covered;
- Document and review a full incident timeline to support claims, improve future response, and strengthen resilience.
Course Curriculum
- Course Introduction
- Important Course Instructions for Certificate Issuance
- Course objectives
- Downloadable Material
- Coordinated Response Teams – Who’s Involved and Why It Matters
- Incident Response Foundations
- Quiz #1
- Introduction and objectives
- The Phishing Email – Entry Point of the Attack
- Detection and Analysis
-
Lateral Movement and Crisis Activation
- Insurance Activation
- Plans in Motion (Preparation)
- Chapter Review
- Quiz #2
- Introduction and objectives
- Containment and Business Disruption
- The Start of Encryption
- The Ransom Decision
- Internal and External Communications
- Eradication
- Chapter Review
- Quiz #3
- Introduction and objectives
- Recovery Planning and Execution
- Regulator and Stakeholder Management
- Recovery and Return to Business
- Recovery and Return to Business part #2
- Post-Incident Review and Future Preparedness
- Chapter Review – Reflection Activity
- Quiz #5
- Closing Remarks
- Course Survey
- Cyber Incident Response – Final Assessment
Testimonials
ITC’s D&O and EPLI courses helped me understand the insurance proposals we receive AND to explain to my executive team and board members the risks we can (and cannot) manage through insurance.
Most insurance courses are either pitched at people learning about the subject for the first time or jump straight into advanced topics. The ITC courses do a great job for all learners and I particularly liked the online format since you can either spend time starting from the beginning or quickly move on to the areas of most interest to you. The course material also went beyond insurance policy language – addressing risk management, claims processes, what buyers should consider, and more.
ITC effectively tackles complex subject matters in a very creative manner. I would highly recommend to anyone looking to broaden their understanding.
Great way to enjoy an evolving subject matter. Thank you ITC, enjoyed that!
I’ve been in the insurance industry for over 20 years and this is by far the best educational material I have seen! Great for new and established professionals!
ITC Education is the perfect platform for busy insurance professionals to expand their knowledge in bite-size, manageable, easy & informative modules. The subject matter is well researched and presented in an engaging and easy-to-understand format. The modules are set up so that you can zero in on a subset or explore the topic more fully – time permitting. The examples are easily applied to real-life situations.
About ITC courses
ITC takes pride in delivering high quality, unbiased courses on professional and management liability insurance and related topics. Designed specifically for online delivery, our courses are interactive, include activities and quizzes, use practical illustrations and real-life case studies and deliver knowledge in bite-sized portions so even just 5 minutes is learning time well spent.
How we build courses
ITC courses are the product of a collaborative approach. We work closely with subject matter experts to build out course content, the ITC design team brings that content to life, and no course is published before undergoing an intense review by an industry panel. Our process also includes post-publication reviews and updates because ITC is committed to delivering quality courses that remain accurate, relevant and up-to-date, long after they are first published.
With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.
No. ITC no longer sells individual courses. New learners choose between:
- All-Access education, or
- ITC Advance certifications program, both of which include course access.
If you have questions, please contact ITC directly.
At ITC, we want to hear from you! Our courses are specifically developed to provide relevant and up-to-date training on insurance topics. If there is something you’d like to learn or explore and we don’t have the course, please reach out!
We take pride in providing up-to-date relevant courses! ITC is committed to reviewing all course content at least once a year and making any necessary updates or additions to course materials.
We provide a digital certificate of completion for all successfully completed courses.
Frequently Asked Questions
With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.
No. ITC no longer sells individual courses. New learners choose between:
- All-Access education, or
- ITC Advance certifications program, both of which include course access.
If you have questions, please contact ITC directly.
At ITC, we want to hear from you! Our courses are specifically developed to provide relevant and up-to-date training on insurance topics. If there is something you’d like to learn or explore and we don’t have the course, please reach out!
We take pride in providing up-to-date relevant courses! ITC is committed to reviewing all course content at least once a year and making any necessary updates or additions to course materials.
We provide a digital certificate of completion for all successfully completed courses.
About ITC courses
ITC takes pride in delivering high quality, unbiased courses on professional and management liability insurance and related topics. Designed specifically for online delivery, our courses are interactive, include activities and quizzes, use practical illustrations and real-life case studies and deliver knowledge in bite-sized portions so even just 5 minutes is learning time well spent.
How we build courses
ITC courses are the product of a collaborative approach. We work closely with subject matter experts to build out course content, the ITC design team brings that content to life, and no course is published before undergoing an intense review by an industry panel. Our process also includes post-publication reviews and updates because ITC is committed to delivering quality courses that remain accurate, relevant and up-to-date, long after they are first published.
Cyber Incident Response: A 360° Walkthrough from Breach to Recovery
