Cyber Incident Response: A 360° Walkthrough from Breach to Recovery
Ever wondered what actually happens when a cyber incident hits?
See a cyber incident the way your client lives it, and see exactly how response plans unfold, what decisions get made under pressure, and why every requirement you ask for in underwriting truly matters.
Built for brokers, underwriters, and risk managers, this course connects policy language to practical action. You’ll see how plans, procedures, and insurance all come together when it counts.
Sign up today and gain the knowledge to better assess risk, shape coverage, and support client resilience with confidence!
Subtitles available in
English
French
Spanish
Course Overview
Cyber incidents can unfold rapidly, requiring organizations to respond across technical, legal, operational, and strategic fronts. This practical, scenario-driven course follows a ransomware incident as it develops, providing a clear view of how organizations and insurance professionals navigate the complex decisions and actions required during a cyber crisis.
You’ll examine how key organizational plans, such as the Cyber Incident Response Plan, Business Continuity Plan, Disaster Recovery Plan, and Crisis Management Plan, are activated under pressure. As the scenario progresses, the course explores the coordination required between internal teams, external specialists, and insurers to contain, eradicate, and recover from a cyber event.
By walking through the incident step by step, you’ll gain insight into how cyber insurance responds in real-world situations and what underwriters look for when evaluating cyber risk and incident preparedness. This practical approach helps demystify the response process while building a clearer understanding of the roles, decisions, and actions involved in managing a ransomware crisis.
Course highlights
Incident Escalation
Response Plans in Action
Roles and Coordination
Insurance Triggers and Documentation
Upgrade
From $35 US a month
Learning Objectives
Upon completing this course, you will be able to:
- Identify when a cyber event becomes an incident, breach, or crisis, and what that means for response and insurance;
- Explain the NIST Incident Response Lifecycle and apply it to real-world ransomware scenarios;
- Illustrate when and how to activate key organizational plans;
- Explain the roles of an Incident Response Team and a CMT, and how they coordinate during a cyber crisis;
- Describe cyber insurance requirements confidently, including when to notify, how to engage vendors, and what’s covered;
- Document and review a full incident timeline to support claims, improve future response, and strengthen resilience.
Course Curriculum
- Course Introduction
- Important Course Instructions for Certificate Issuance
- Course objectives
- Downloadable Material
- Chapter Introduction and Objectives
- Key Definitions
- The NIST Incident Response Lifecycle in 6 Phases
- Coordinated Response Teams – Who’s Involved and Why It Matters
- Incident Response Foundations
- Quiz #1
- Introduction and objectives
- The Phishing Email – Entry Point of the Attack
- Detection and Analysis
-
Lateral Movement and Crisis Activation
- Insurance Activation
- Plans in Motion (Preparation)
- Chapter Review
- Quiz #2
- Introduction and objectives
- Containment and Business Disruption
- The Start of Encryption
- The Ransom Decision
- Internal and External Communications
- Eradication
- Chapter Review
- Quiz #3
- Introduction and objectives
- Recovery Planning and Execution
- Regulator and Stakeholder Management
- Recovery and Return to Business
- Recovery and Return to Business part #2
- Post-Incident Review and Future Preparedness
- Chapter Review – Reflection Activity
- Quiz #5
- Closing Remarks
- Course Survey
- Cyber Incident Response – Final Assessment
Certifications
This is a required course for the following certification programs:
-
- Certified Cyber Liability Insurance Professional → LEARN MORE
Testimonials
Very clear, concise content, delivered in an easy to understand way. Whether an industry vet or just starting out, you will learn something from this course- I did! It’s easy to see how this platform could complement any corporate training program. I’d thoroughly recommend ITC to any L&D manager.
I’m super impressed with the quality of the courses. Graphics are the bomb!!
Great job ITC! Love the cartoons. Complex subject matter presented in a very fun way.
These are the best online insurance training offerings I’ve seen in terms of content and ease of use.
The coverage explanations are comprehensive and straightforward, coverage comparison tips are very helpful, and the claims examples are readily adaptable to real-life client scenarios. The visuals are easy to follow and the succinct course modules allowed me to review the modules on my own timeline- or to go back to modules that I wanted to revisit. Plus, as a very welcome bonus, continuing education credits are available in certain jurisdictions!
ITC Education is the perfect platform for busy insurance professionals to expand their knowledge in bite-size, manageable, easy & informative modules. The subject matter is well researched and presented in an engaging and easy-to-understand format. The modules are set up so that you can zero in on a subset or explore the topic more fully – time permitting. The examples are easily applied to real-life situations.
About ITC courses
ITC delivers high-quality, unbiased online courses on professional and management liability insurance and related topics. Designed specifically for online learning, our courses combine practical illustrations, real-life case studies, activities and quizzes to make complex insurance topics easier to understand.
How we ensure course quality
ITC courses are developed collaboratively with subject matter experts and brought to life by our instructional design team. Before publication, courses undergo industry review, followed by ongoing post-publication reviews and updates to help ensure content remains accurate, relevant and up to date.
Our CII CPD accreditation provides an additional independent measure of quality for ITC’s eLearning programme.

With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.
We’d love to hear from you! At ITC, we’re always exploring timely and relevant insurance topics to support your professional development. If there’s a subject you’d like to learn more about, let us know. Your ideas help us shape future courses and learning opportunities.
We provide a digital certificate of completion for all successfully completed courses. Learn how to access your certificate →
ITC’s eLearning programme is CII CPD Accredited by the Chartered Insurance Institute (CII). This accreditation demonstrates the quality of ITC’s learning programme and confirms that it meets the requirements of the CII member CPD scheme.
CII accreditation applies to ITC’s eLearning programme. This means the quality of our learning programme has been independently reviewed and confirmed to meet the requirements of the CII member CPD scheme.
For CII members, eligible ITC courses can contribute toward continuing professional development (CPD) requirements. After completing a course, you’ll receive a certificate of completion to document your learning.
Frequently Asked Questions
With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.
We’d love to hear from you! At ITC, we’re always exploring timely and relevant insurance topics to support your professional development. If there’s a subject you’d like to learn more about, let us know. Your ideas help us shape future courses and learning opportunities.
We provide a digital certificate of completion for all successfully completed courses. Learn how to access your certificate →
ITC’s eLearning programme is CII CPD Accredited by the Chartered Insurance Institute (CII). This accreditation demonstrates the quality of ITC’s learning programme and confirms that it meets the requirements of the CII member CPD scheme.
CII accreditation applies to ITC’s eLearning programme. This means the quality of our learning programme has been independently reviewed and confirmed to meet the requirements of the CII member CPD scheme.
For CII members, eligible ITC courses can contribute toward continuing professional development (CPD) requirements. After completing a course, you’ll receive a certificate of completion to document your learning.
About ITC courses
ITC delivers high-quality, unbiased online courses on professional and management liability insurance and related topics. Designed specifically for online learning, our courses combine practical illustrations, real-life case studies, activities and quizzes to make complex insurance topics easier to understand.
How we ensure course quality
ITC courses are developed collaboratively with subject matter experts and brought to life by our instructional design team. Before publication, courses undergo industry review, followed by ongoing post-publication reviews and updates to help ensure content remains accurate, relevant and up to date.
Our CII CPD accreditation provides an additional independent measure of quality for ITC’s eLearning programme.

Cyber Incident Response: A 360° Walkthrough from Breach to Recovery

