Incident Response, BC, and DR Concepts (Coursera)

Offered by (ISC)²,
Incident Response, BC, and DR Concepts (Coursera)

Welcome to course 2 of 5 of this Specialization, Incident Response, BC, and DR Concepts. This course focuses on the availability part of the CIA triad and the importance of maintaining availability of both human and system resources. These are usually accomplished through the implementation of Incident Response (IR), Business Continuity (BC) and Disaster Recovery (DR) plans. While these three plans may seem to overlap in scope, they are three distinct plans that are vital to the survival of any organization.

Class Deals by MOOC List - Click here and see Coursera's Active Discounts, Deals, and Promo Codes.

After completing this course, the participant will be able to: 
Explain how organizations respond to, recover from and continue to operate during unplanned disruptions.

  • Recall the terms and components of incident response.
  • Summarize the components of a business continuity plan.
  • Identify the components of disaster recovery.
  • Practice the terminology of and review incident response, business continuity and disaster recovery concepts.

Agenda
Course Introduction
Module 1: Incident Response (IR)
Module 2: Business Continuity (BC)
Module 3: Disaster Recovery (DR)
Module 4: Incident Response, Business Continuity, and Disaster Recovery Review
This training is for IT professionals, career changers, college students, recent college graduates, advanced high school students and recent high school graduates looking to start their path toward cybersecurity leadership by taking the Certified in Cybersecurity entry-level exam.
There are no prerequisites to take the training or the exam. It is recommended that candidates have basic Information Technology (IT) knowledge. No work experience in cybersecurity or formal education diploma/degree is required.

Course 2 of 5 in the Certified in Cybersecurity Specialization.

Syllabus

WEEK 1
Course Introduction
This course focuses on the availability part of the CIA triad and the importance of maintaining availability of both human and system resources. These are usually accomplished through the implementation of Incident Response (IR), Business Continuity (BC) and Disaster Recovery (DR) plans. While these three plans may seem to overlap in scope, they are three distinct plans that are vital to the survival of any organization.Here are the primary things to remember in this course: first, the Incident Response plan responds to unexpected changes in operating conditions to keep the business operating; second, the Business Continuity plan enables the business to continue operating throughout the crisis; and finally, if both the Incident Response and Business Continuity plans fail, the Disaster Recovery plan is activated to help the business to return to normal operations as quickly as possible. When it comes to a career in cybersecurity, the day-to-day focus is monitoring information systems and looking out for abnormal network activity, malicious software and threat actors. Security professionals spend their days ensuring the confidentiality, integrity and availability of systems and data, but in addition to safeguarding networks and securing the exchange of data and shared resources, it’s important to realize that cybersecurity goes beyond the technical aspects. Its scope encompasses the protection of people and their personal information. There is nothing more important than the health and safety of our users, coworkers and customers.

WEEK 2
Incident Response (IR)
Throughout this module, we will focus on the goal and the individual components of Incident Response.

WEEK 3
Business Continuity (BC)
Throughout this module, we will focus on the goal and the individual components of Business Continuity (BC).

WEEK 4
Disaster Recovery (DR)
Throughout this module, we will focus on the goal and the individual components of Disaster Recovery (DR).

WEEK 5
Incident Response, Business Continuity, and Disaster Recovery Review
This module will test your knowledge on what you have learned throughout this course.

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Deception As a Defense (Coursera) Coursera
Starweaver

Deception As a Defense (Coursera)

In this course, defensive concepts will be explored and the power of using deception at different layers of the network. The attacker depends on information that is gathered during their surveillance, and with deception we change the network at layer 2-4 and the result of this is the attacker’s collected data is no longer valid and useless for them, this requires the attacker to start the information gathering process over again.

Nov 9th 2026
2 Weeks
In the Trenches: Security Operations Center (Coursera) Coursera
EC-Council

In the Trenches: Security Operations Center (Coursera)

Cyber-attacks, breaches, and incidents continue to grow. The sophistication and complexity of these attacks continue to evolve. More than ever organizations need to plan, prepare, and defend against a potential cyber incident. Security Operation Centers (SOCs) act as an organization's front-line defense against cyber incidents. SOC analyst accomplishes this by monitoring and responding to network and host anomalies, performing an in-depth analysis of suspicious events, and when necessary, aiding in forensic investigations.

Nov 23rd 2026
4 Weeks
Penetration Testing and Incident Response (edX) EdX
IBM

Penetration Testing and Incident Response (edX)

Learn about the various phases of penetration testing, incident response, and the forensic process. This course is part of the IBM Cybersecurity Analyst Professional Certificate! This course is suitable for individuals seeking a fundamental grasp of Cybersecurity or as the fifth installment in a series of courses to develop the skills essential for a career as a Cybersecurity Analyst.

Self Paced
Self-Paced
High Availability and Disaster Recovery with the SAP HANA Platform (openSAP) OpenSAP
SAP

High Availability and Disaster Recovery with the SAP HANA Platform (openSAP)

With the SAP HANA platform, you can easily set up high availability (HA) and disaster recovery (DR) operations as part of data center readiness. The platform provides HA/DR capabilities with multiple options to select RTO (recovery time objective) and RPO (recovery point objective) timelines based on planned and unplanned downtimes for your IT landscape. The course starts with a general overview of SAP HANA platform HA/DR features. It then expands on the different capabilities for high availability and disaster recovery. Demo video links will be provided that showcase the configurations and setup required for operations in a data center environment.

Self Paced
Self-Paced
Stages of Incident Response (Coursera) Coursera
Infosec

Stages of Incident Response (Coursera)

The Cyber Incident Response course will give students an understanding of how incidents are responded to at a high level, as well as allow them to build important technical skills through the hands-on labs and projects. This course starts with a high-level discussion of what happens at each phase of responding to an incident, followed by a technical deep dive into some of the more exciting parts of memory, network, and host analysis and forensics. This course is for anyone wishing to apply learned forensics and offensive knowledge such as ethical hacking to the incident response process.

Nov 9th 2026
5-12 Weeks
Cloud Security on AWS (Coursera) Coursera
Edureka

Cloud Security on AWS (Coursera)

Welcome to the Cloud Security on AWS course, where you'll embark on a journey to acquire practical expertise in building a robust understanding of cloud security fundamentals, AWS security services, advanced threat detection, secure network design, data protection, encryption techniques, and incident response planning while ensuring compliance with AWS standards and governance best practices.

Nov 16th 2026
1 Week
Securing the IoT Landscape: From Inception to Architecture (Coursera) Coursera
LearnQuest

Securing the IoT Landscape: From Inception to Architecture (Coursera)

This comprehensive course is designed for professionals and students seeking a deep understanding of the IoT security landscape. Learners should have a comprehensive understanding of IoT foundations. Participants will cover the Device Identity lifecycle, learn the steps in the Device Bootstrap Process, and explore preventive security measures at the device, network, and cloud levels using real-world examples. The course guides learners through the IoT incident response lifecycle, including the setup of a Security Incident Response Team.

Nov 2nd 2026
3 Weeks
Sound the Alarm: Detection and Response (Coursera) Coursera
Google

Sound the Alarm: Detection and Response (Coursera)

This is the sixth course in the Google Cybersecurity Certificate. These courses will equip you with the skills you need to apply for an entry-level cybersecurity job. You’ll build on your understanding of the topics that were introduced in the fifth Google Cybersecurity Certificate course. In this course, you will focus on incident detection and response.

Nov 2nd 2026
4 Weeks