Cyber Incident Response: A 360° Walkthrough from Breach to Recovery

Ever wondered what actually happens when a cyber incident hits?

See a cyber incident the way your client lives it, and see exactly how response plans unfold, what decisions get made under pressure, and why every requirement you ask for in underwriting truly matters.

Built for brokers, underwriters, and risk managers, this course connects policy language to practical action. You’ll see how plans, procedures, and insurance all come together when it counts.

Sign up today and gain the knowledge to better assess risk, shape coverage, and support client resilience with confidence!

Subtitles available in

English

French

Spanish

Course Overview

Cyber incidents can unfold rapidly, requiring organizations to respond across technical, legal, operational, and strategic fronts. This practical, scenario-driven course follows a ransomware incident as it develops, providing a clear view of how organizations and insurance professionals navigate the complex decisions and actions required during a cyber crisis.

You’ll examine how key organizational plans, such as the Cyber Incident Response Plan, Business Continuity Plan, Disaster Recovery Plan, and Crisis Management Plan, are activated under pressure. As the scenario progresses, the course explores the coordination required between internal teams, external specialists, and insurers to contain, eradicate, and recover from a cyber event.

By walking through the incident step by step, you’ll gain insight into how cyber insurance responds in real-world situations and what underwriters look for when evaluating cyber risk and incident preparedness. This practical approach helps demystify the response process while building a clearer understanding of the roles, decisions, and actions involved in managing a ransomware crisis.

Course highlights

Red check icon

Incident Escalation

How to identify when a cyber event becomes an incident, breach, or crisis—and what that means for insurance notification, response activation, and legal exposure.
Red check icon

Response Plans in Action

What each response plan is designed to do, when it should be activated, and how it supports business continuity and recovery.
Red check icon

Roles and Coordination

Who gets involved during a cyber incident—including the Cyber Incident Response Team and Crisis Management Team—and how their decisions impact coverage and claims.
Red check icon

Insurance Triggers and Documentation

When to notify the insurer, how to engage privacy lawyers and panel vendors, and what documentation is critical for a smooth claims process.

Upgrade

From $35 US a month

Get Unlimited Access to all online insurance courses for $350 US / year (or a monthly subscription of $35 USD).

Learning Objectives

Upon completing this course, you will be able to:

  1. Identify when a cyber event becomes an incident, breach, or crisis, and what that means for response and insurance;
  2. Explain the NIST Incident Response Lifecycle and apply it to real-world ransomware scenarios;
  3. Illustrate when and how to activate key organizational plans;
  4. Explain the roles of an Incident Response Team and a CMT, and how they coordinate during a cyber crisis;
  5. Describe cyber insurance requirements confidently, including when to notify, how to engage vendors, and what’s covered;
  6. Document and review a full incident timeline to support claims, improve future response, and strengthen resilience.

Course Curriculum

  • Course Introduction
  • Important Course Instructions for Certificate Issuance
  • Course objectives
  • Downloadable Material
  • Chapter Introduction and Objectives
  • Key Definitions
  • The NIST Incident Response Lifecycle in 6 Phases
  • Coordinated Response Teams – Who’s Involved and Why It Matters
  • Incident Response Foundations
  • Quiz #1
  • Introduction and objectives
  • The Phishing Email – Entry Point of the Attack
  • Detection and Analysis
  • Lateral Movement and Crisis Activation
  • Insurance Activation
  • Plans in Motion (Preparation)
  • Chapter Review
  • Quiz #2
  • Introduction and objectives
  • Containment and Business Disruption
  • The Start of Encryption
  • The Ransom Decision
  • Internal and External Communications
  • Eradication
  • Chapter Review
  • Quiz #3
  • Introduction and objectives
  • Recovery Planning and Execution
  • Regulator and Stakeholder Management
  • Recovery and Return to Business
  • Recovery and Return to Business part #2
  • Post-Incident Review and Future Preparedness
  • Chapter Review – Reflection Activity
  • Quiz #5
  • Closing Remarks
  • Course Survey
  • Cyber Incident Response – Final Assessment

Certifications

This is a required course for the following certification programs:

    • Certified Cyber Liability Insurance Professional → LEARN MORE

 

#certifications {display: flex;}

Testimonials

Team Lead Underwriter, UK

Very clear, concise content, delivered in an easy to understand way. Whether an industry vet or just starting out, you will learn something from this course- I did! It’s easy to see how this platform could complement any corporate training program. I’d thoroughly recommend ITC to any L&D manager.

Rated 5 out of 5
Regional Manager/Broker, Canada

I’m super impressed with the quality of the courses. Graphics are the bomb!!

Rated 5 out of 5
Senior Underwriter, Canada

Great job ITC! Love the cartoons. Complex subject matter presented in a very fun way.

Rated 5 out of 5
Marketing Broker, Australia

These are the best online insurance training offerings I’ve seen in terms of content and ease of use.

Rated 5 out of 5
Broker, EVP, Canada

The coverage explanations are comprehensive and straightforward, coverage comparison tips are very helpful, and the claims examples are readily adaptable to real-life client scenarios.  The visuals are easy to follow and the succinct course modules allowed me to review the modules on my own timeline- or to go back to modules that I wanted to revisit. Plus, as a very welcome bonus, continuing education credits are available in certain jurisdictions!

Rated 5 out of 5
Account Executive/SVP, Canada

ITC Education is the perfect platform for busy insurance professionals to expand their knowledge in bite-size, manageable, easy & informative modules. The subject matter is well researched and presented in an engaging and easy-to-understand format. The modules are set up so that you can zero in on a subset or explore the topic more fully – time permitting. The examples are easily applied to real-life situations.

Rated 5 out of 5

About ITC courses

ITC delivers high-quality, unbiased online courses on professional and management liability insurance and related topics. Designed specifically for online learning, our courses combine practical illustrations, real-life case studies, activities and quizzes to make complex insurance topics easier to understand.

How we ensure course quality

ITC courses are developed collaboratively with subject matter experts and brought to life by our instructional design team. Before publication, courses undergo industry review, followed by ongoing post-publication reviews and updates to help ensure content remains accurate, relevant and up to date.
Our CII CPD accreditation provides an additional independent measure of quality for ITC’s eLearning programme.
CII_ Accredited Logo

With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.

We’d love to hear from you! At ITC, we’re always exploring timely and relevant insurance topics to support your professional development. If there’s a subject you’d like to learn more about, let us know. Your ideas help us shape future courses and learning opportunities.

We provide a digital certificate of completion for all successfully completed courses. Learn how to access your certificate →

ITC’s eLearning programme is CII CPD Accredited by the Chartered Insurance Institute (CII). This accreditation demonstrates the quality of ITC’s learning programme and confirms that it meets the requirements of the CII member CPD scheme.
CII accreditation applies to ITC’s eLearning programme. This means the quality of our learning programme has been independently reviewed and confirmed to meet the requirements of the CII member CPD scheme.
For CII members, eligible ITC courses can contribute toward continuing professional development (CPD) requirements. After completing a course, you’ll receive a certificate of completion to document your learning.

Frequently Asked Questions

With ITC, you can take any course at any time. For the best learning experience, a prerequisite may be recommended in the course description.

We’d love to hear from you! At ITC, we’re always exploring timely and relevant insurance topics to support your professional development. If there’s a subject you’d like to learn more about, let us know. Your ideas help us shape future courses and learning opportunities.

We provide a digital certificate of completion for all successfully completed courses. Learn how to access your certificate →

ITC’s eLearning programme is CII CPD Accredited by the Chartered Insurance Institute (CII). This accreditation demonstrates the quality of ITC’s learning programme and confirms that it meets the requirements of the CII member CPD scheme.
CII accreditation applies to ITC’s eLearning programme. This means the quality of our learning programme has been independently reviewed and confirmed to meet the requirements of the CII member CPD scheme.
For CII members, eligible ITC courses can contribute toward continuing professional development (CPD) requirements. After completing a course, you’ll receive a certificate of completion to document your learning.

About ITC courses

ITC delivers high-quality, unbiased online courses on professional and management liability insurance and related topics. Designed specifically for online learning, our courses combine practical illustrations, real-life case studies, activities and quizzes to make complex insurance topics easier to understand.

How we ensure course quality

ITC courses are developed collaboratively with subject matter experts and brought to life by our instructional design team. Before publication, courses undergo industry review, followed by ongoing post-publication reviews and updates to help ensure content remains accurate, relevant and up to date.
Our CII CPD accreditation provides an additional independent measure of quality for ITC’s eLearning programme.
CII_ Accredited Logo

Cyber Incident Response: A 360° Walkthrough from Breach to Recovery

5 star rating

Upgrade

From $35 US a month

Get Unlimited Access to all online insurance courses for $350 US / year (or a monthly subscription of $35 USD).

View Next Course

Managing policy renewals with Excel
Best Seller
1.5 hours

Managing Policy Renewals using MS Excel

Take the course! Learn to set up MS Excel using shortcuts, formulas and formatting; includes tips for easy ways to manage your insurance policy renewal portfolio.  

Can’t find what you’re looking for?

We’ll help you find the answers! Reach out today. We are standing by to answer your questions.

Businesswoman